Vercel preview deployments are publicly reachable, no Vercel login required
DecidedDecision ·
Vercel Authentication ("Require Log In") is off, project-wide. Any preview deployment — demo.theclearline.io and any other branch's preview URL — is reachable by anyone, no Vercel account needed.
Why
This was the free way to make demo.theclearline.io publicly usable as a real staging site. The paid alternative — Vercel Pro + Advanced Deployment Protection, $150/month — adds a per-domain exceptions list, letting demo.theclearline.io stay public while other preview branches stay gated behind a Vercel login. Not worth paying for yet: nothing behind any preview deployment ever touches real customer data (Preview is permanently wired to clearline-dev, never clearline-prod), so the worst case today is someone finding a branch with fake test data on it.
Revisit when
Working on a feature branch that's competitively sensitive or embargoed — something not meant to be discoverable before it's announced. Vercel's preview URLs are built from the branch name (e.g. clearline-app-git-<branch>-...), not a random hash, so a descriptively-named branch is somewhat guessable if its name leaks anywhere — a PR title, a Slack message. That's the trigger to pay for the exception rather than try to rename branches to obscure them.