Skip to content

Insights · Strategy · Jan 5, 2026 · 8 min read

The pre-launch website checklist a non-technical owner can run

Most launch problems are not code problems. They are missing pages, untested forms, broken redirects and analytics nobody wired up. Here is a grouped, sequenced checklist a non-technical owner can run before launch.

oldevs.com1.8s · 100
Request a quote

Website launches go wrong for boring reasons: a contact form that sends to nobody, old URLs that dead-end, a staging setting that tells search engines to ignore the whole site. A pre-launch checklist is not paperwork, it is the difference between a quiet Monday and a week of firefighting. The list below is grouped and sequenced so a non-technical owner can run it with a browser, a phone and about two hours a day over the final two weeks.

Key takeaways

  • Start two weeks out. Content and legal pages first, technical switches last, because content changes take the longest and depend on other people.
  • Three failures cause most of the post-launch firefighting we see: a live noindex tag, missing redirects from old URLs, and a form that quietly sends nowhere.
  • Test forms the way a customer would: on a phone, on mobile data, then follow the message all the way to the inbox and the reply.
  • Analytics, consent and conversion tracking must be working before launch, not bolted on the week after, or your first week has no baseline.
  • Book a week-one watchlist into your calendar. A launch is a week of observation, not a single afternoon.

Content, legal and the pages everyone forgets

Content is the slowest part of any launch because it depends on approvals, so clear it first. Walk the site page by page with a notepad and check the unglamorous things.

  • Placeholder hunting. Use the site search and your browser find function for "lorem", "coming soon", "TBD", "test", "example.com" and any previous business name. Placeholders survive launches far more often than anyone expects.
  • Titles and descriptions. Every page needs its own page title and description. Duplicates across ten pages tell search engines you have one page, not ten.
  • The forgotten pages. A useful 404 page with links back into the site, privacy policy, terms of use, an accessibility statement, and a contact page that carries your real business name, address, phone number and hours.
  • Consistency. Phone number, email and address should match exactly in the footer, the contact page and any listing you control. Mismatched details confuse customers and search engines equally.
  • Images. Alt text on anything that carries meaning, and no photographs you do not have a licence to use.

If you serve customers in both official languages, check the French pages with the same care as the English ones. Half-translated navigation is a common and avoidable embarrassment.

Analytics and consent, wired before you launch

If tracking goes live a week after the site does, you have no baseline to compare against and no way to tell whether the new site is working. Set it up during the build and verify it on staging.

Create the analytics property, confirm the tag fires on every page including thank-you and confirmation pages, and define the three to five actions that actually matter to your business: form submission, phone tap, booking, quote request, file download. Vanity metrics can wait. Then verify the site in Google Search Console and Bing Webmaster Tools so you have somewhere to submit your sitemap on launch day.

Consent comes with it. Your banner should default to declining non-essential cookies, and your tags must genuinely respect that choice rather than firing regardless. Before launch, remove any staging or test property IDs so your real numbers are not split across two accounts. If you want a second pair of eyes on measurement design, that is the kind of work our analytics and CRO practice does alongside a build.

Test every form, notification and reply path

This is the most valuable hour on the list, and it needs no technical skill. Run these steps in order for each form on the site.

  1. Fill out the form as a real customer would, on a phone, on mobile data rather than office Wi-Fi.
  2. Confirm you see a clear on-screen confirmation, not a blank page or a silent reload.
  3. Check the inbox that is supposed to receive it, then check the junk folder, then check it again an hour later in case of delay.
  4. Read the automatic reply the customer receives. Check the sender name, the reply-to address and the wording.
  5. Reply to that automatic email and confirm it reaches a monitored inbox rather than a no-reply void.
  6. Confirm the enquiry also lands wherever you keep records: CRM, shared inbox or spreadsheet.
  7. Submit deliberately bad data, such as a malformed email address, and confirm the error message is readable and the form keeps what was already typed.
  8. Repeat once from a different device and browser, because notification failures are often device-specific.

While you are here, ask whoever manages your domain to confirm SPF, DKIM and DMARC records are set for the address your site sends from. Notification email that lands in spam looks identical to a broken form from the customer's side. Email authentication and form handling sit inside the same security and compliance conversation, and both are worth settling before launch rather than after.

Accessibility and performance spot-checks you can run yourself

You do not need an audit tool to catch the obvious problems. You need fifteen minutes and a willingness to stop using your mouse.

The keyboard and zoom pass

Press Tab repeatedly from the top of the homepage. You should always be able to see where you are, reach the navigation, open the menu, and get to the main content without a trap. Then zoom the browser to 200 per cent and confirm nothing overlaps or disappears. Check that form fields have visible labels rather than placeholder text alone, that link text says where it goes, and that any video has captions. These are the everyday failures behind WCAG 2.2 AA, which is the standard we build to by default.

The weak-signal pass

Load the homepage, your busiest service page and the contact page on a phone with a poor connection. Watch for hero images that take too long, text that jumps as fonts load, video that autoplays and eats data, and buttons that shift under your thumb.

If it does not work on a five-year-old phone on transit Wi-Fi, it does not work.

Note what you find, then get it fixed before launch rather than adding it to a list nobody returns to.

Launch day: redirects, DNS, SSL, backups and monitoring

Save every irreversible switch for one focused window, ideally a weekday morning when the people who can help are awake. Follow this order.

  1. List every old URL. Export the old sitemap or crawl the existing site so you have the full inventory, not just the pages you remember.
  2. Map old to new. Point each old URL at its closest new equivalent with a permanent redirect. Sending everything to the homepage is the lazy option and it loses rankings and confuses returning visitors.
  3. Back up the old site. Take a complete copy of files and database, store it somewhere off the server, and keep it for at least a few months after launch. It is your only undo button.
  4. Lower the DNS TTL further ahead of the switch than the current TTL value, so the old records have expired everywhere by the time you change them.
  5. Confirm the certificate. Check that SSL covers both the www and non-www versions, that one redirects to the other, and that the padlock appears on every page.
  6. Force HTTPS and look for mixed-content warnings, usually caused by an old image or script loading over plain HTTP.
  7. Remove the staging guards. Delete the noindex tag, the password wall and any Disallow rules in robots.txt that were protecting the build. Miss this one and the new site can sit invisible to search engines for weeks before anyone notices.
  8. Submit the sitemap in Search Console and request indexing for your homepage and top service pages.
  9. Switch on monitoring. Uptime checks, certificate expiry alerts and automated daily backups, with one restore actually tested so you know the backup works.

Test the whole set from a device that has never seen the site: a phone on mobile data, in a private window. Your own computer may be holding a cached version and telling you a comfortable lie.

The week-one watchlist

A launch is a week of observation. Put fifteen minutes in your calendar each day and check the same short list.

WhenWhat to checkWhat good looks like
Launch dayIndexing settings, SSL, forms, top ten pages on a phoneNo noindex, padlock on every page, a test enquiry received and replied to
Day 2Analytics is recording sessions and conversionsTraffic appears in real time and conversions are firing on the right pages
Days 3 to 4404 errors and redirect coverageBroken URLs traced to a missing redirect and fixed the same day
Day 5Enquiry volume against your normal weekSimilar or better; a sudden drop means a form or notification problem
Day 7Search Console coverage and page experience reportsPages indexed, no crawl errors, no new warnings

Two things to ignore in week one: small ranking wobbles, which are normal while search engines recrawl, and design opinions from people who have not used the site on a phone. Fix what is broken first, then argue about the hero image.

How OlDevs helps

We have been launching sites from Vancouver since 2014, and we run this checklist on every build we ship. You get one accountable team rather than a relay of contractors, a working demo every week so nothing is a surprise at the end, and full ownership of your code, designs, accounts and IP when the project closes. Accessibility to WCAG 2.2 AA is built in rather than retrofitted, and we work in English and French when your audience needs both.

If you are launching soon and want the redirect map, tracking and launch-day sequence handled by people who have done it many times, tell us about the project. We reply to every enquiry within one business day. See how we approach web development, or request a quote and we will walk your current site with you.

FAQ

Questions on this topic.

Two weeks is realistic for most small sites. Content approvals and legal pages take longest because they depend on other people, so start there. Analytics, consent and form testing sit in the final week, and the irreversible switches, redirects, DNS and SSL, happen in one focused window on launch day.

The staging guards: a leftover noindex tag or password wall that was protecting the build. It hides the new site from search engines completely and can go unnoticed for weeks. Next are redirects: old URLs that dead-end instead of pointing at their new equivalents, which costs you rankings and returning visitors.

Most of it, no. Placeholder hunting, form testing, the keyboard and zoom accessibility pass and the week-one watchlist need only a browser and a phone. A developer or your host should handle the redirect map, DNS and SSL changes, email authentication records and monitoring setup, since those need server access.

Still have a question? Ask us when you request a quote

Let’s connect

Want this applied to your business?

Tell us what you’re building. We’ll reply within one business day with next steps and a tailored quote.

We’ll only use your details to prepare your quote. No lists, no spam.

Call us Request a quote
We use cookies for personalized content and ads, social features, and analytics. We share site usage data with our partners.
Cookies settings
Accept
Decline
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

What information do we collect?

We collect information from you when you register on our site or place an order. When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address or mailing address.

What do we use your information for?

Any of the information we collect from you may be used in one of the following ways: To personalize your experience (your information helps us to better respond to your individual needs) To improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you) To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs) To process transactions Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested. To administer a contest, promotion, survey or other site feature To send periodic emails The email address you provide for order processing, will only be used to send you information and updates pertaining to your order.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to?keep the information confidential. After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be kept on file for more than 60 days.

Do we use cookies?

Yes (Cookies are small files that a site or its service provider transfers to your computers hard drive through your Web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information We use cookies to help us remember and process the items in your shopping cart, understand and save your preferences for future visits, keep track of advertisements and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business. If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. However, you can still place orders by contacting customer service. Google Analytics We use Google Analytics on our sites for anonymous reporting of site usage and for advertising on the site. If you would like to opt-out of Google Analytics monitoring your behaviour on our sites please use this link (https://tools.google.com/dlpage/gaoptout/)

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Registration

The minimum information we need to register you is your name, email address and a password. We will ask you more questions for different services, including sales promotions. Unless we say otherwise, you have to answer all the registration questions. We may also ask some other, voluntary questions during registration for certain services (for example, professional networks) so we can gain a clearer understanding of who you are. This also allows us to personalise services for you. To assist us in our marketing, in addition to the data that you provide to us if you register, we may also obtain data from trusted third parties to help us understand what you might be interested in. This ‘profiling’ information is produced from a variety of sources, including publicly available data (such as the electoral roll) or from sources such as surveys and polls where you have given your permission for your data to be shared. You can choose not to have such data shared with the Guardian from these sources by logging into your account and changing the settings in the privacy section. After you have registered, and with your permission, we may send you emails we think may interest you. Newsletters may be personalised based on what you have been reading on theguardian.com. At any time you can decide not to receive these emails and will be able to ‘unsubscribe’. Logging in using social networking credentials If you log-in to our sites using a Facebook log-in, you are granting permission to Facebook to share your user details with us. This will include your name, email address, date of birth and location which will then be used to form a Guardian identity. You can also use your picture from Facebook as part of your profile. This will also allow us and Facebook to share your, networks, user ID and any other information you choose to share according to your Facebook account settings. If you remove the Guardian app from your Facebook settings, we will no longer have access to this information. If you log-in to our sites using a Google log-in, you grant permission to Google to share your user details with us. This will include your name, email address, date of birth, sex and location which we will then use to form a Guardian identity. You may use your picture from Google as part of your profile. This also allows us to share your networks, user ID and any other information you choose to share according to your Google account settings. If you remove the Guardian from your Google settings, we will no longer have access to this information. If you log-in to our sites using a twitter log-in, we receive your avatar (the small picture that appears next to your tweets) and twitter username.

Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Childrens Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

Updating your personal information

We offer a ‘My details’ page (also known as Dashboard), where you can update your personal information at any time, and change your marketing preferences. You can get to this page from most pages on the site – simply click on the ‘My details’ link at the top of the screen when you are signed in.

Online Privacy Policy Only

This online privacy policy applies only to information collected through our website and not to information collected offline.

Your Consent

By using our site, you consent to our privacy policy.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page.
Save settings
Cookies settings