Release notes

Changelog

Every user-facing update to Style Sandbox — web, the browser extension, and the mobile apps. Versions follow semver.

v0.4.0

2026-07-13

WebExtensioniOSAndroid

Try before you sign up + faster, guided onboarding

Added

No-signup trial — upload a base photo and generate your first look before creating an account.
Guided base-photo onboarding with clear photo tips (full-body, front-facing, good lighting).
Curated 'Starter looks' to try instantly while your base photo finishes generating.
Native iOS and Android apps (in addition to web + the browser extension).
Show/hide password toggle on sign in and sign up.

Changed

Sign-in is now optional to start — the builder and camera are reachable without an account.
Coin packs reframed with clearer value and a single 'Best value' pick.

Security

Layered anti-abuse on the free trial (multi-signal quota, input caps, pre-generation content moderation).

v0.3.0

2026-04-30

WebExtension

Cross-context login, account deletion, and a security hardening pass

Added

Cross-context login — sign in once on the extension, the web app picks up the same session automatically.
Forgot-password flow at /auth/password/forgot and /auth/password/reset.
Account deletion (GDPR Art. 17) at DELETE /auth/me.
Branded 404, error, loading, and maintenance pages.
PWA install support — add to home screen on iOS / Android.
Refund Policy page and a non-tracking cookie-consent banner.

Changed

Refresh-token rotation — every /auth/refresh mints a new token and revokes the old one.
Login lockout after 10 failed logins per username or 30 per IP.
Password policy: >=8 chars with at least one letter and one digit.
Razorpay verify is now idempotent — webhook retries no longer double-credit.

Security

Removed the legacy /auth/token endpoint.
Per-resource ownership checks on tryon, mannequin rate, mannequin tryon, and lineage walks.
Request body size cap (15 MiB) and per-request timeout (60s) middleware.
File upload magic-byte verification.
CORS default is now empty (was wildcard) — misconfigured deploys fail closed.

v0.2.2

2026-03-15

WebExtension

Community try-on cloth restoration

Added

Community try-on cloth restoration — re-using a community mannequin as your base now restores the original outfit pieces in your slots.

Changed

Extension popup HistoryTab refinements + animation polish.

v0.2.1

2026-03-04

WebExtension

Community mannequins + GPT-Image-2

Added

Community mannequin support across extension and web.
Infinite scrolling on the community feed.

Changed

Image generation backend switched to GPT-Image-2.

Stay updated

Get the latest version of Style Sandbox

Install the browser extension to start generating virtual try-ons in seconds.

Get the extension Open web app

Release notes

Changelog

Every user-facing update to Style Sandbox — web, the browser extension, and the mobile apps. Versions follow semver.

v0.4.0

2026-07-13

WebExtensioniOSAndroid

Try before you sign up + faster, guided onboarding

Added

No-signup trial — upload a base photo and generate your first look before creating an account.
Guided base-photo onboarding with clear photo tips (full-body, front-facing, good lighting).
Curated 'Starter looks' to try instantly while your base photo finishes generating.
Native iOS and Android apps (in addition to web + the browser extension).
Show/hide password toggle on sign in and sign up.

Changed

Sign-in is now optional to start — the builder and camera are reachable without an account.
Coin packs reframed with clearer value and a single 'Best value' pick.

Security

Layered anti-abuse on the free trial (multi-signal quota, input caps, pre-generation content moderation).

v0.3.0

2026-04-30

WebExtension

Cross-context login, account deletion, and a security hardening pass

Added

Cross-context login — sign in once on the extension, the web app picks up the same session automatically.
Forgot-password flow at /auth/password/forgot and /auth/password/reset.
Account deletion (GDPR Art. 17) at DELETE /auth/me.
Branded 404, error, loading, and maintenance pages.
PWA install support — add to home screen on iOS / Android.
Refund Policy page and a non-tracking cookie-consent banner.

Changed

Refresh-token rotation — every /auth/refresh mints a new token and revokes the old one.
Login lockout after 10 failed logins per username or 30 per IP.
Password policy: >=8 chars with at least one letter and one digit.
Razorpay verify is now idempotent — webhook retries no longer double-credit.

Security

Removed the legacy /auth/token endpoint.
Per-resource ownership checks on tryon, mannequin rate, mannequin tryon, and lineage walks.
Request body size cap (15 MiB) and per-request timeout (60s) middleware.
File upload magic-byte verification.
CORS default is now empty (was wildcard) — misconfigured deploys fail closed.

v0.2.2

2026-03-15

WebExtension

Community try-on cloth restoration

Added

Community try-on cloth restoration — re-using a community mannequin as your base now restores the original outfit pieces in your slots.

Changed

Extension popup HistoryTab refinements + animation polish.

v0.2.1

2026-03-04

WebExtension

Community mannequins + GPT-Image-2

Added

Community mannequin support across extension and web.
Infinite scrolling on the community feed.

Changed

Image generation backend switched to GPT-Image-2.

Stay updated

Get the latest version of Style Sandbox

Install the browser extension to start generating virtual try-ons in seconds.

Get the extension Open web app