← RLS Review

Terms & privacy

Last updated 5 November 2026.

What the free check does

The free check runs entirely in your browser. The query result you paste is read by JavaScript on this page and is never sent to us or anyone else. The query itself is read-only: it reads table settings and access rules, never your rows.

No guarantee

The check reads your rules, not your intentions. It can miss problems and can flag things that are fine for your app. It is not a penetration test, an audit certificate or legal advice. You are responsible for any change you run on your database — try fixes on a copy first if you can.

What we count

We count page events (page opened, query copied, review run, example opened, fix copied, "want the full review" pressed), the score and number of findings of a review, the country from the network edge and the referring site. No IP address, no cookies, no account, never the pasted text.

Paid full review

The paid full review (US$49 per app, one-off) is not on sale yet. When it opens, payment will be handled by our reseller Paddle.com, who is the Merchant of Record for those orders and handles tax and invoices. Refunds: if the full review does not help you, ask within 14 days and you get your money back.

Who runs this

RLS Review is run by Yurii Tyvodar, sole trader (ФОП), Ukraine. It is an independent tool, not made by or affiliated with Supabase, Lovable or any app builder. Contact: via the email on the Paddle receipt once sales open.