Changelog

Report abuse on any site we host

Anyone can now report a site hosted on deploybase at deploybase.eu/report-abuse, with or without an account. Give us the URL, what is wrong, and an email address; you get a confirmation straight away and we review every report within two business days. This is the notice-and-action channel the EU Digital Services Act asks of hosting providers, and it is also how you reach us if someone is impersonating your brand on our platform. Our acceptable use policy now spells out what we do not allow, from phishing pages and malware to doorway pages built to game search rankings, and how we respond: a warning where the risk allows, then suspension, then removal. Existing sites are unaffected unless they break those rules. If you think we got a decision wrong, write to abuse@deploybase.eu and we will look again.

• Report form at deploybase.eu/report-abuse, no account needed
• Confirmation by email, review within two business days
• Clearer acceptable use policy with the enforcement steps written down

Product updates in your dashboard

You can now follow what changes in deploybase without leaving the dashboard. A bell in the top bar lists the latest changelog entries and any notices from us, with a dot until you have opened it. Each entry links to the full text on this page, and a notice that needs your acknowledgement, such as updated terms, asks for it right there. You start with nothing marked unread, so joining a team does not greet you with months of history. Everything in the bell is also on this page and in its RSS feed, so nothing moves out of reach.

• Changelog entries and notices in one place, newest first
• An unread dot, cleared once you open the bell
• Acknowledge a notice that needs it without leaving the page

New teams with a taken name could not sign in

Fixed sign-in failing with a server error for a new organisation whose name matched an existing team's. The first visit tried to create the team under a name that was already taken, failed, and every page after that showed the same error, so you could not get past it by trying again. New teams now get a slightly longer address when the short one is taken, and teams already set up are not affected.

New sites got no public URL

Fixed projects created since 1 September deploying without their sites.deploybase.eu address: the build finished, but the dashboard showed no URL and the site returned a 404. New branch previews and share links had the same problem, and single-page apps deployed in that window did not get their deep-link fallback. Existing sites were not affected. The cause was on our side: the deep-link fix from 1 September configured CDN rules in a way our provider accepts for updates but rejects for new sites. If a project you created this week has no public URL, deploy it once more and the address appears within a minute.

Reloading a deep link no longer 404s

Reloading or sharing a URL like yoursite.eu/dashboard/settings on a single-page app returned a 404 instead of your app. The first page load worked, so it only showed up on a refresh or a pasted link, and it affected production URLs, branch previews and custom domains alike. Custom 404.html pages had the same problem. The cause was on our side: the CDN rule that falls back to your app shell was configured in a way that never actually fired. If your build output has a 200.html, a _redirects catch-all, or a 404.html, redeploy once after this release and deep links will work.

Our live platform numbers, now public

deploybase.eu/open now shows the same numbers we look at every day: deployments, build minutes, success rate, bandwidth, form submissions and more, straight from the production database that serves the product. Nothing on the page is hand-edited, and we will not quietly drop a metric in a bad month. Every figure is served by a public API endpoint, so you can verify our claims yourself instead of taking our word for them. Only aggregate platform totals appear, never anything about your team or your sites. The page also explains why we publish this; the short version is that we think the internet gets better when companies show their work.

• A live board of deployments, build minutes, success rate, bandwidth, forms and custom domains
• Every number is verifiable: curl api.deploybase.eu/api/v1/public/stats, no API key needed
• Platform totals only. Your team's data never appears
• deploybase.eu/open-source now says plainly where open-sourcing stands: a real goal, no dates yet

Fixes and improvements

Eight fixes this round: five from the onboarding feedback you sent, three from our own audits. Thank you for the sharp reports.

• Fixed deleting a branch preview silently failing when the branch name contains a slash, so previews for feature/login-style branches can now be cleaned up like any other
• Fixed a project's shown production URL going stale after changing its subdomain: the site itself moved correctly, but dashboard links and the copy button kept the old address until the next deploy
• Fixed the repository picker swallowing the first click or two when connecting a GitHub repo: the panel closed without selecting anything. One click now selects
• Fixed the deploy wizard reading "Auto-detectfrom pnpm-lock.yaml" — the missing space is back
• The docs are now linked from the deploybase.eu header and a new Resources footer column, so finding them no longer depends on knowing they exist
• Fixed the copy button on docs code blocks sitting one line too low, sometimes spilling past the edge of the block
• Fixed account signup stalling on the bot check: it now starts solving the moment you click into the email field, instead of waiting until submit. Small trade: the cursor is no longer pre-placed
• Removed dead links from the framework deploy guides and the docs footer, which pointed at pages and repos that don't exist

Send form submissions to someone outside your team

You can now add any email address as a recipient of a form's submissions, no deploybase account needed. Add your client's address in the form's settings and they get one confirmation email; nothing is sent until they click it. After that, every submission arrives in their inbox with the full content, so they never have to log in anywhere. Existing forms are unchanged until you add a recipient, and adding or removing one needs the admin role. Built for agencies: you run the site, your client answers the enquiries.

• Confirmed opt-in: one verification email, one click, nothing sent before it
• The whole submission in the mail, not a log-in-to-view notification
• One-click unsubscribe on every email, honored immediately
• If an address bounces or marks our mail as spam, we stop sending automatically and show it on the form's settings page

Bot protection without a third party

Creating an account is now protected against automated signups, and the check runs entirely on our own infrastructure. There's no puzzle to solve and no images to click — your browser quietly does a small piece of maths while you fill in the form. Nothing about you is sent to Google, Cloudflare, or any other bot-detection service, because there isn't one in the path. Signing in and signing up were already free of third-party requests; this keeps them that way. One thing to know: signing up with email and password now needs JavaScript enabled. Signing up with GitHub works either way.

• No puzzle, no images, nothing for you to click
• Our subprocessor list did not change to make this work — check it at deploybase.eu/subprocessors
• Built on ALTCHA, an open-source project from Brno, Czechia, running on our own servers

Nameserver changes confirmed within a minute

When you point a domain at our nameservers, we now confirm the change by asking your domain's registry directly instead of waiting for public DNS caches to catch up. Delegation is typically confirmed within a minute of your registrar applying the change, where it could previously take hours. A new Check now button runs the same check on demand and, if your domain still points elsewhere, shows the exact nameservers we found so you know what's left to change. We also warn you when DNSSEC is enabled at your registrar, which silently blocks delegation until you turn it off there. Applies to domains using 'We host your DNS'; domains already connected are unaffected.

Fixes and improvements

Four fixes for problems you reported this week: three in custom domains, one in the docs. All four were reported within a day of someone hitting them. Thank you for the sharp reports.

• Fixed adding a domain with 'We host your DNS' never showing the two nameservers to set at your registrar: the domain looked connected seconds after you added it, before you had changed anything, leaving no way to complete the setup. The delegation step now stays visible until your nameservers actually point at us. If you tried the option since yesterday and hit this dead end, it works now
• Fixed the domains page counting your domains in the header while the list below stayed empty. Domains waiting on nameserver delegation or an SSL certificate now always show up, together with the setup steps needed to finish connecting them, and the page keeps refreshing itself until they are live
• Fixed the SSL status claiming your DNS was correct when your DNS provider had appended your own domain to the CNAME value, the classic missing-trailing-dot mistake. The error now names the exact record to fix instead of telling you to wait
• Fixed docs links without a trailing slash redirecting to an unreachable docs.deploybase.eu:8080 address, including every API reference link inside the docs

We can host your DNS

You can now let deploybase host your domain's DNS, in beta. Choose 'We host your DNS' when adding a custom domain and delegate your nameservers to us once. The apex domain and www are wired up automatically, SSL is issued without any verification records, and your domain stays registered where it is. This is the way around the classic apex problem: if your DNS provider doesn't support ALIAS records, the root domain simply couldn't point at us before. Domains already connected keep their current setup. This option appeared in our docs earlier but was never switched on in production. It's enabled now.

See exactly who processes your data

Every subprocessor we use is now listed publicly at deploybase.eu/subprocessors: what each one does, where it runs, and the legal basis for any data transfer. Each vendor has a stable deep link you can cite in your own privacy policy or DPA review. Most platforms bury this in a PDF or behind a sales call. We think you should be able to check it in ten seconds, no signup, no email gate.

SPA fallback and custom 404 pages

Deep links into your single-page app now serve your app instead of a 404 — reload /dashboard/settings on a SvelteKit or React SPA and it just works. Ship a 200.html in your build output, or a _redirects file with the catch-all /* /index.html 200, and every unknown path falls back to your app on production URLs, branch previews, and custom domains alike. Custom 404.html pages now also work on custom domains. If a site has both, the SPA fallback wins, matching what you'd expect coming from Netlify. Existing projects pick this up on their next deploy or promotion — nothing to configure. One honest note: custom 404 pages are currently served with a 200 status code. Reported by one of our first users.

Docs search is back

Fixed search on docs.deploybase.eu hanging on 'Searching…' forever — the search index was silently missing from our docs builds, and every release now verifies it exists before shipping. The docs also got a redesign along the way: a landing page that shows the path from git push to live, clearer navigation with visibly clickable links throughout, and full keyboard and screen-reader support meeting WCAG 2.1 AA. Thanks to the user who reported the broken search.

Open your live site straight from the projects list

Clicking a project's URL in the projects list now opens your live site, and clicking the repository name opens the repository — each in a new tab, marked with a small external-link icon. Clicking anywhere else on the row still opens the project itself. Projects with a failed or in-progress build now sort to the top of the list, so anything that needs your attention is the first thing you see. The framework badge is gone (the icon already told you), and the docs are now one click away from the top navigation, wherever you are in the app. Suggested by one of our first users.

Fixes and improvements

Reliability fixes across billing — mostly felt when a payment didn't go through cleanly the first time.

• Fixed usage periods staying frozen after you subscribe, so paid plan limits now reset every month as intended
• Fixed accounts keeping paid features indefinitely after a failed payment — access now pauses until the payment issue is resolved
• Fixed a completed payment occasionally leaving your subscription inactive; upgrades now apply reliably, even if a confirmation arrives out of order
• Clearer error messages from the payment provider when an action can't complete, instead of a bare 'Bad Request'

Build with Bun

You can now use Bun as your project's package manager. If your repository has a bun.lock or bun.lockb lockfile, builds detect it and install dependencies with bun install, frozen to your lockfile so versions resolve exactly as they do on your machine. You can also pick Bun explicitly in your project's build settings. As with every package manager, dependency lifecycle scripts stay disabled during install, so a compromised package can't run code in your build. Existing projects are unaffected, and if you set a custom build command as a Bun workaround, it keeps working — you can simply remove it now.

Delete your account yourself

You can now erase your account and everything in it from Settings → Account, covering your right to erasure under GDPR Article 17 without emailing support. Requesting deletion starts a 14-day grace period: nothing is removed during it, your sites stay online, and you can cancel with one click. Once the period ends, erasure runs automatically and removes your projects, deployments, stored files, custom domains, form submissions, team data, and your sign-in identity. Invoices stay with Creem, our payment provider, for the 7 years tax law requires, and we keep one anonymous record that the deletion happened. Download your data first if you want a copy.

• 14-day grace period, cancelable with one click
• A standing banner shows the deletion date on every page until then
• The page states plainly what is erased and the little that is kept

Change your plan without a new checkout

You can now upgrade, downgrade, or switch between monthly and annual billing directly from the billing page. Changes apply immediately: the unused portion of your current plan is prorated against the new price and settled on your existing payment method, with no new checkout. Previously, changing plans as an existing subscriber could start a second checkout and, in the worst case, charge you twice. That path is now closed: if you already have a subscription, starting a checkout is refused and the billing page routes you through the plan change instead. Moving to the Free plan works through cancellation, so you keep your paid features until the end of the period you've paid for.

• Upgrades and downgrades apply instantly, prorated to the day
• Switch between monthly and annual billing in one click
• Fixed plan changes creating a second subscription and double-charging in rare cases

Download the data we hold about you

Settings → Account now shows every record that identifies you as a person — your profile, the teams you belong to, invitations sent to your address, and feedback you've sent us — and lets you download the lot as JSON. That covers your right of access and data portability under GDPR Articles 15 and 20, without emailing support and waiting. Work owned by a team, like projects, deployments and forms, isn't part of it: those stay with the team when you leave. Downloading changes nothing, and support@deploybase.eu still handles anything the page doesn't cover.

• See what we hold in plain language, before downloading anything
• Covers every team you belong to, not just the one you're viewing
• The file explains what it contains, what it leaves out, and why

Faster sign-in with passkeys

If your account has a passkey, deploybase now asks for it as soon as you've entered your email — one tap with Face ID, Touch ID, or your security key instead of typing a password. Password and two-factor sign-in keep working exactly as before. You can add a passkey any time in your account's security settings.

Fixes and improvements

Smaller updates from the past few weeks across billing, forms, builds, and domains.

• Fixed paid subscriptions occasionally staying inactive after a completed checkout — plan upgrades now apply as soon as your payment is confirmed
• Fixed form submissions from JavaScript-rendered sites being blocked by cross-origin checks
• Fixed the form endpoint URL showing a localhost address in the dashboard
• Fixed standard install commands being rejected by overly strict build validation
• Build failure emails now reach the team owner when no notification address is configured
• Custom domains are now verified end-to-end before being marked active, so an active domain is one that is actually serving your site
• Redesigned the billing page with a clearer statement view and usage meters

Sign in with GitHub

You can now create your deploybase account and sign in with GitHub — no password to invent, and you're ready to connect a repository the moment you land in the dashboard. Existing email accounts keep working unchanged.

Your package manager, detected automatically

Builds now detect your package manager from your lockfile — pnpm, npm, Yarn, or Bun — and install dependencies with it, so lockfiles resolve exactly as they do on your machine. Existing projects keep their configured install command; you can override the detected choice in your project's build settings.

Handle form submissions without a backend

You can now point any HTML form at a deploybase endpoint and collect submissions. They're stored in the EU, filtered for spam without CAPTCHAs, and emailed to your team.

• Copy-paste one endpoint URL into any form — static, SSR, or JS-rendered
• Spam is quarantined without reCAPTCHA or Akismet — review it with one click
• Submissions stored in the EU (Paris) with auto-purge retention and an erasure tool
• Formspree-compatible reserved fields — migrate with a URL swap
• Email notifications, with smart digests for busy forms

Deploy from your terminal

You can now deploy and manage your sites without leaving the terminal. Log in, trigger deploys, tail build logs, check status, and open your site — all from the CLI.

• One-command login via your browser
• Deploy from any Git-linked project directory
• Tail build logs and watch deployment status in real time
• List projects, view deployments, open sites directly

Invite your team

You can now collaborate on deploybase with your team. Invite members via email, assign roles (owner, admin, member), and control who can deploy, manage settings, or handle billing.

• Invite teammates via email with one-click acceptance
• Owner, admin, and member roles with granular permissions
• Transfer ownership or remove members from settings

Documentation site

Browse getting-started guides, framework references, and API docs at docs.deploybase.eu.

Automatic VAT for all EU countries

Correct VAT is now applied automatically for every EU country, with proper invoices for every transaction. No manual tax configuration needed.

Predictable pricing, no overages

Every plan now has generous hard limits. No overages, no variable charges — your bill is the same every month.

• Free: 100 GB bandwidth
• Starter: 500 GB bandwidth, 1,000 build minutes
• Pro: 1 TB bandwidth, 3,000 build minutes
• Scale: 2 TB bandwidth, 10,000 build minutes

Environment variables

You can now manage environment variables per project. Variables are encrypted at rest and injected at build time for all supported frameworks.

• Encrypted at rest, injected at build time
• Works with every supported framework
• Per-environment variable support
• Bulk import and export

Auto-deploy on push

Push to GitHub, GitLab, or Codeberg and your site deploys automatically. Each provider's webhook format is supported natively with signature verification.

• GitHub, GitLab, and Codeberg support
• Branch-based auto-deploy rules
• Webhook event history and debugging

Guided project setup

A step-by-step project creation flow that detects your framework, configures build settings, and sets up Git webhooks — all in one smooth experience.

Free, Starter, Pro, and Scale plans

Four plans with transparent EUR pricing. No per-seat charges — bring your whole team on Pro and Scale.

• Free with 1 site and 100 GB bandwidth
• Starter at €9/mo for solo developers
• Pro at €19/mo with team access
• Scale at €49/mo with unlimited members

Manage projects from your AI assistant

You can now manage deploybase projects directly from Claude, Cursor, or any MCP-compatible AI assistant. Check project status, trigger deployments, manage domains — all from your AI workflow.

• Full project lifecycle: deploy, rollback, manage domains
• Migrate from Vercel, Netlify, and Cloudflare Pages
• API key and OAuth authentication
• Hosted at mcp.deploybase.eu

deploybase is live

You can now sign up and start deploying. Compare features, pick a plan, and get your first site live in under two minutes.

Clearer build logs

Build output now shows distinct stages (clone, install, build, deploy) with error classification, so you can pinpoint failures faster.

Privacy policy and terms of service

Our privacy policy and terms of service are published. GDPR-compliant data handling, transparent about what we collect and why.

Email notifications

Get notified by email when your builds succeed or fail. Manage notification preferences per type from your account settings.

Hosted in the EU

All data stored and processed in Paris, France — compute, database, and authentication. Sites delivered globally via Bunny.net CDN.

• Kubernetes compute in Scaleway Paris
• High-availability PostgreSQL with automated failover
• Global CDN delivery via Bunny.net (100+ PoPs worldwide)