Transport
HTTPS, certificate validity, http→https redirect, response code, content type, insecure resources, compression, HSTS.
What the check covers
Mobile basics
Viewport meta tag, title and app name length, icons and web app manifest, language, meta refresh, JavaScript-rendered shell.
Store rules
Privacy policy link, sign-up vs. account deletion, third-party login vs. Sign in with Apple, OAuth in WebViews, digital purchase hints, store links and Smart App Banners.
Vibe-coder specifics
Preview and tunnel domains, platform subdomains, builder badges, cookie banners, external links, server cold starts.
After the check: three steps to the App Store
Fix the blockers in your builder
Most fixes are a privacy page, an account deletion button or a custom domain. Every tool guide contains a copy-paste prompt that does it for you.
Wrap it with WebViewGold
Paste the URL, set name and icon, enable push notifications and the features you want. Build with Xcode or in the browser with the Cloud Builder.
Submit with the guarantee
Apple App Store approval guarantee – or your money back within 14 days. 96.4% of all WebViewGold apps get approved by the review teams on the first attempt.
Frequently asked questions
What does the readiness check do?
It loads the URL you enter once, the way a mobile browser would (one request plus a tiny probe of http:// and your web app manifest), and evaluates the response against the technical requirements of the App Store review: HTTPS and certificate, viewport tag, privacy policy link, account deletion and login hints, payment hints, builder preview domains and badges, response time and more. Nothing is stored.
Is a 100 score a guarantee of approval?
No tool can promise that; the final decision is made by Apple and Google and depends on your content and functionality. That is why WebViewGold comes with an approval guarantee: if the WebViewGold-based app is rejected for a non-content reason, you get your money back within 14 days of purchase.
Why does it say "JavaScript-rendered app"?
Apps from Lovable, Bolt, v0 and most React projects send an HTML shell and render the content in the browser. Our check reads the HTML and headers only, so text-based findings (privacy link, login buttons, badges) may be incomplete for such apps. The transport, domain and viewport checks are always reliable.
Can I check a page behind a login?
The check only sees what an anonymous visitor sees. Enter the public landing page or the login page; the store reviewers start there too.
Do you store or publish my URL?
No. The URL is fetched, analyzed and discarded. Rate limits apply per network to keep the tool free for everyone.