Product updates
What's new
Every feature shipped, bug fixed, and improvement made — all in one place.
v1.15.0April 8, 2026
- AddedMulti-brand framework GA — brand_id carried end-to-end through session JWT, X-Brand-Id request header, and backend capability middleware
- AddedPer-brand Stripe statement descriptors live in production (credit-card statements now show the brand, not the parent operator)
- AddedOptional Supabase custom_access_token_hook for JWT brand_id claim injection, unlocking defense-in-depth RLS
- SecurityCI secret-scan hook — blocks JWT / Stripe live-key / Anthropic-key patterns from landing on main
- ImprovedApplication-layer brand isolation on every Next.js API route (users, payments, sessions filters scoped by brand)
v1.14.1March 10, 2026
- SecurityRotated production Supabase service-role key; formalised 90-day rotation policy
- SecurityBackend fail-fast on missing SESSION_TOKEN_SECRET / ALLOWED_ORIGINS in production
- FixedBrand capability cache could serve stale results for 60 s after brand row update — now invalidates on write
- Fixedapp_mode router occasionally fell back to realtime when brand.appMode was set asynchronously
v1.14.0February 24, 2026
- AddedBrand capability routing — backend middleware rejects endpoints the brand has not been granted (realtime_swap / face_match / image_swap / enhance / rest_api)
- AddedPer-brand app_mode router — Next.js lazy-loads the correct UI shell (realtime / match / api_console / enhance / marketplace) based on brand config
- AddedPer-brand robots.txt and sitemap.xml with AI crawler policy (allow GPTBot / ClaudeBot / PerplexityBot; block CCBot / Bytespider)
- ImprovedBrand-specific build IDs via generateBuildId decorrelate asset hashes across sibling-brand deployments
v1.13.1January 27, 2026
- FixedHydration mismatch warning under React 19 strict mode on the pricing page
- FixedCSS transitions briefly firing during server render in the Navbar mobile menu
- FixedSitemap omitting blog posts whose date field parsed to an invalid Date in certain locales
v1.13.0January 13, 2026
- AddedUpgraded to Next.js 16.2 and React 19 — leaner Server Components, new caching defaults
- AddedStripe SDK pinned to 2025-08-27 API version for stable automatic-payment-methods behaviour
- ImprovedClient JS bundle ~18% smaller thanks to React 19 Server Components and Turbopack production builds
- SecurityCSP tightened — only Stripe, Supabase, and the configured backend WebSocket origin remain in connect-src
v1.12.0November 18, 2025
- Addedbrands configuration table (capabilities, pricing_model, app_mode columns) — foundation for running multiple brands on the shared backend
- Addedbrand_id column on users, sessions, and payments tables with Row Level Security policies
- Addedbrand-switching script (scripts/switch-brand.sh) for local env multiplexing across brand configs
- ImprovedSentry and PostHog events now tagged with brand_id and brand name for per-brand cohort analytics
v1.11.0September 30, 2025
- AddedGrafana Cloud dashboards for GPU utilisation, queue depth, and per-session latency percentiles
- AddedUptimeRobot synthetic monitors on the homepage and /api/health (5-minute cadence)
- AddedPrometheus metrics export from the backend with session and frame counters
- ImprovedSentry trace sample rate dialled to 25% — faithful error capture at a fraction of the ingestion cost
v1.10.0August 5, 2025
- AddedSelf-service account deletion from the Account modal — soft-deletes immediately, purged after 30 days (GDPR Article 17)
- AddedAvatar upload with per-user storage path in Supabase Storage (replaces the earlier data-URI blob approach)
- AddedCookie consent banner redesign — separate accept / reject / preferences paths (CCPA- and GDPR-compliant)
- ImprovedAccount modal now shows remaining-time with a live countdown and a refresh button
v1.9.1July 1, 2025
- FixedWebcam device hot-swap (e.g. plugging in an external camera mid-session) no longer drops the WebRTC peer connection
- FixedFPS drops on dual-monitor Windows setups when the browser moved between displays
- ImprovedSession recovery after laptop wake-from-sleep — reconnect within 3 s when remaining-time is still valid
v1.9.0May 27, 2025
- AddedGPEN enhancement model v2 — noticeably sharper skin texture and more accurate dark-skin tone rendering
- AddedEnhancement intensity slider with three presets (natural, balanced, studio)
- ImprovedLip-sync during the enhancement pass — eliminated the subtle mouth drift on high-FPS streams
- FixedOccasional banding artefacts around the hairline when the subject wore glasses
v1.8.1April 15, 2025
- FixedWebRTC reconnect storm could trigger if the backend restarted during peak hours — now bounded to a single reconnect per client
- FixedTURN credentials fetched from /api/turn-credentials now expire correctly after 1 hour (previously stayed cached until tab close)
- SecuritySession tokens shortened to a 30-minute TTL; auto-refreshed transparently by the client
v1.8.0March 25, 2025
- AddedHMAC-SHA256 session tokens on every WebRTC upgrade — prevents replay and IP-based hijacking
- AddedIP-bucketed rate limit on /api/session-token (10 requests per minute per IP)
- AddedCloudflare Realtime TURN integration with ephemeral credential rotation on each session start
- SecurityFrontend CSP now derives connect-src from NEXT_PUBLIC_BACKEND_URL at build time
v1.7.0February 18, 2025
- AddedSafari 18 and iOS 18 full support — fixed the WebRTC datachannel negotiation edge case that previously required a refresh
- AddedFocus and AI-only view modes — cycle with a keyboard shortcut to hide chrome during live streaming
- ImprovedWebSocket auto-reconnect with exponential backoff (up to 5 attempts, capped at 30 s)
- FixedTarget-face image not persisting when the tab became inactive for >15 minutes
v1.6.0January 14, 2025
- AddedMobile layout overhaul — new bottom navigation bar, one-tap camera switch, Safari-safe viewport handling
- AddedAtomic time deduction via Supabase RPC (deduct_user_time) — eliminates the race where concurrent sessions could overspend credits
- ImprovedPayment modal collects currency from the brand config (default USD, supports EUR / GBP / CAD / AUD / JPY / SGD)
v1.5.1December 17, 2024
- FixedWebcam device listing on macOS Sonoma 14.7 — enumerate devices after the first getUserMedia permission grant
- FixedHoliday-season billing race where a top-up could be credited twice if the webhook fired out of order
- FixedFocus-mode layout flicker on the first frame after switching back from AI-only view
v1.5.0November 26, 2024
- AddedOBS Studio 30 compatibility — works out of the box with the new Browser Source permissions model
- AddedStreamlabs virtual camera integration documented with a step-by-step setup guide
- AddedRecording preview modal — download the last session as MP4 without leaving the faceswap tab
- ImprovedClient-ip detection moved to a dedicated API route so it tolerates Vercel edge caching correctly
v1.4.0October 31, 2024
- Added2K resolution output for Enterprise plan users
- AddedGoogle Meet integration via OBS Virtual Camera guide
- AddedMulti-destination streaming — go live on Twitch and YouTube simultaneously
- ImprovedAvatar expression tracking latency reduced by 40%
- FixedAudio sync drift on streams longer than 90 minutes
v1.3.2October 14, 2024
- FixedBackstage session occasionally failing to start on Safari 17
- FixedCredits not refreshing correctly after plan upgrade
- SecurityUpdated session token rotation policy to 12-hour cycles
v1.3.0September 30, 2024
- AddedOBS Browser Source integration for direct stream capture
- AddedPriority Queue access for Starter plan and above
- AddedWatermark removal for all paid plans
- ImprovedHyper-realism model updated — smoother skin tone matching
- ImprovedDashboard redesigned with new Backstage control panel
v1.2.0September 17, 2024
- AddedYouTube Live destination support
- AddedDiscord OAuth sign-in
- AddedRecorded stream export as MP4
- ImprovedCloud rendering pipeline — 25% faster frame processing
- FixedAvatar not persisting after page refresh in Backstage
v1.1.0August 31, 2024
- AddedTwitch destination support
- AddedCustom avatar upload (Pro plan and above)
- ImprovedFace detection accuracy in low-light conditions
v1.0.0August 14, 2024
- AddedInitial public launch of Onlyface
- AddedFree, Starter, Creator, Pro, Scale, Business, and Enterprise plans
- AddedReal-time cloud face swap with zero local GPU requirement
- AddedOne-click avatar selection from built-in library