Data shows in preview but not live? Check your RLS policies
A common pattern with Lovable, Bolt and other Supabase-backed apps: the data shows up while you test, but real visitors see an empty list, or saves quietly do nothing.
Often the cause is Row Level Security (RLS). With RLS on and no matching policy, Supabase usually returns no rows instead of an error, so nothing looks broken.
- Open a private window, log out, and load the page as a stranger would.
- In Supabase, check each table has a
SELECTpolicy for the right role (anonorauthenticated). - Check inserts and updates have their own policies too.
- Keep policies tight: only expose rows that are meant to be public.