Guides
One question per page, then the scan box.
How do I check if my Lovable app leaks API keys?
Lovable ships a client bundle. Keys in that bundle are visible to anyone who loads the page. Check before you share the link.
Is my Supabase anon key exposed?
The anon key is supposed to be in the browser. The service_role key is not. Here is how to tell them apart.