Lekker Website Checklist

Content & UX

No placeholder/lorem; spelling & grammar pass
Readable, task-focused copy; plain language
Page has a clear primary intent (and matches title/H1)
Contact, pricing, and key CTAs present & consistent
Legals present & linked: Privacy, Cookies, Terms, Accessibility
404 page is useful (navigation/search) and branded
Print stylesheet (where relevant) looks sane
Favicons & app icons present (dark/light variants if needed)

SEO & IA

Performance & Core Web Vitals

LCP, INP, CLS within target budgets (lab + field where possible)
Images served as AVIF/WebP with responsive sizes (`<picture>`/`srcset`), lazy-loaded
Fonts subsetted; `font-display: swap` or similar; only needed weights
Preload/Preconnect used for critical resources (fonts, hero img, CDN, analytics)
JS/CSS bundles trimmed & split; non-critical assets deferred
Compression enabled (Brotli/gzip); HTTP/2 & HTTP/3 supported
Edge/CDN caching configured with sensible TTLs; set immutable for static assets
Third-party scripts audited (remove unused; load async; respect consent)
Define and enforce a performance budget (KB, requests, LCP)

Cross-Device Rendering

Responsive at common breakpoints (≤360, 390–430, 768, 1024, ≥1440px)
Looks/works in Chrome, Safari, Firefox, Edge (latest two versions)
Mobile Safari & Chrome (iOS), Chrome (Android) checked on real devices
Dark mode styles (if supported) don’t break contrast/brand
Touch targets ≥44px; safe-area insets respected on iOS

Functionality

All forms submit; validation (min/max, patterns) enforced client/server
Spam protection in place (honeypot/turnstile/reCAPTCHA as needed)
Success/failed states clear; events fire on submissions
Transactional email deliverability verified (SPF, DKIM, DMARC)
Site search returns relevant results (no private content exposed)
Error states handled (empty results, 404, 500) with helpful UX
File downloads (PDF, etc.) correct type, size, and tracking

Analytics, Consent & Tagging

GA4 (or chosen analytics) implemented with clear event schema
Consent Mode v2 / CMP configured and tested for all tags
Server-side tagging (if used) respects consent and IP anonymization
Key conversion events tested end-to-end (ads platforms + GA4 receiving)
UTM governance in place; internal redirects preserve params
Bot filtering and internal traffic filters configured
Analytics annotations created for launch

Security & Compliance

HTTPS everywhere; HTTP→HTTPS redirect; HSTS enabled
Security headers set: CSP, Referrer-Policy, Permissions-Policy, X-Content-Type-Options
Cookies scoped/secure; SameSite correctly set
Admin/staging behind auth/IP allowlist; directory listing disabled
Dependency & vulnerability scans clean (SCA/SAST)
Backups & disaster recovery plan verified; restore tested
Privacy requests (access/delete/export) process documented
WAF/rate-limiting enabled where appropriate

Monitoring & Operations

Uptime monitoring configured (prod + key endpoints)
Error tracking (e.g., Sentry) installed and generating events
Real User Monitoring (RUM) for Core Web Vitals active
Log retention/alerting for 4xx/5xx spikes
CDN/origin dashboards accessible; on-call/rollback plan documented

PWA (Optional)

Web App Manifest complete (icons, theme, start_url, display)
Service Worker registered; caching strategy defined
Offline/poor network states handled gracefully
Installability tested (Lighthouse pass)

E-commerce (Optional)

Product schema, pricing, availability accurate & updated
Cart/checkout tested (guest + account); taxes/shipping correct
Payment gateways (3DS/SCA) pass; receipts & confirmations sent
Refund/returns flow and policy clear and linked
Enhanced conversions or server-side events validated

Internationalisation (Optional)

Language switch preserves context; correct locale defaults
Currency, dates, numbers formatted per locale
Hreflang & region targeting consistent with sitemaps
Geo-redirects (if any) don’t block crawlers; offer manual switch

Post-Launch

Sitemaps submitted; key URLs requested in GSC
Ads & pixels receiving conversions; budgets resumed
Redirects validated at scale (no loops/soft 404s)
Real-world Web Vitals checked after 7–14 days (CrUX/RUM)
Error logs & uptime alerts clean after go-live window
Create a post-launch report (rankings, traffic, vitals, issues)

Website pre & post launch checklist

Website pre & post launch checklist

Content & UX

SEO & IA

Performance & Core Web Vitals

Cross-Device Rendering

Functionality

Analytics, Consent & Tagging

Security & Compliance

Monitoring & Operations

PWA (Optional)

E-commerce (Optional)

Internationalisation (Optional)

Post-Launch

Get in touch

Get in touch

Get in touch

Content & UX

SEO & IA

Performance & Core Web Vitals

Accessibility

Cross-Device Rendering

Functionality

Analytics, Consent & Tagging

Security & Compliance

Monitoring & Operations

PWA (Optional)

E-commerce (Optional)

Internationalisation (Optional)

Post-Launch

Get in touch

Get in touch

Get in touch