r/shopifyDev • u/CraftedlyUser • 13h ago
[Showcase] Just got my first app approved on the Shopify App Store – 3 things that tripped me up
I just got my first app approved: Craftedly: Ask Your Store. It emails merchants a store summary every Monday morning and shows insight cards in the admin. Solo build on Remix, hosted on Railway, Postgres on Supabase, email through Resend.
Here are a few things that cost me time, in case they save you some:
1. Dev sessions were overwriting my production App URL.
My shopify.app.dev.toml had automatically_update_urls_on_dev = true. Every time I ran a dev session, it swapped the live app URL for a Cloudflare tunnel URL that died when I stopped. The fix was setting it to false and adding include_config_on_deploy = true to the production shopify.app.toml, then redeploying.
2. Supabase’s “Unrestricted” table warning.
If your tables live in Supabase’s public schema with RLS off, they’re exposed through its API. Enabling RLS on every table fixed it. My app connects as the database owner, so nothing in the app broke.
3. Test data and app review.
I had placeholder data in one insight card (customer platform breakdown). I pulled it before submitting rather than risk a rejection, and I’m now choosing between a Web Pixel extension and ShopifyQL to populate it with real data. If you’ve done either, I’d like to hear which held up better.
Next up: multi-store reporting for agencies.
What tripped you up on your first submission?

