What only breaks when you open your AI-built site logged out?
by•
Lately I've been opening a lot of vibe-coded sites the way a stranger would: new browser, not logged in, on my phone. The preview in the builder almost always looks fine. The public page often doesn't.
The stuff I keep running into is boring but real. The tab still says "Vite + React" or "My App". The share card on X or Slack is blank. A pricing or signup link points to a route that only existed in the preview. The waitlist form looks like it works, but nothing lands anywhere.
None of it shows up until you leave the editor.
If you've shipped something built with Cursor, Lovable, Bolt or v0: what was the first thing that broke when a real user opened it, and how did you catch it?
27 views
Replies
Mine was the other way around, LOL. The app is meant to be used logged out (no sign-up needed), so the thing that broke was signing in: blank screen right after.
The boring one I can match though. My share tags were still pointing at an old domain that doesn't even resolve anymore. Nothing in the editor tells you that.
Do you run the stranger check by hand every time, or have you scripted it?
you dont find out the waitlist form is dead until someone asks why they never heard back
One to add to your stranger check: the platform split. My web funnel gets ad traffic, and on its first day every one of the 9 emails collected came from Android, none from iOS, although analytics saw two thirds of the landings on iOS. A number like that does not say what broke, only where to look, and you only see it if you count per platform. So my version of your check: open the real ad link on a real iPhone and a real Android phone, from inside the app the ad runs in as well as in the normal browser, and walk all the way to the step that should land somewhere, an email, an account, a song.
The blank share card got me too. Now nothing goes out without an og:image and a twitter:image, and the build stops if a post doesn't have one. The other one that bit me was a URL baked in at build time. My dev address ended up in production, so now client code builds links from the live origin instead.