diff --git a/LAUNCH_CHECKLIST.md b/LAUNCH_CHECKLIST.md
new file mode 100644
index 0000000..0359f65
--- /dev/null
+++ b/LAUNCH_CHECKLIST.md
@@ -0,0 +1,51 @@
+# Vynl Launch Checklist
+
+## Accounts to Create
+
+- [ ] **Anthropic API account** — separate account for Vynl at console.anthropic.com, get API key
+- [ ] **Spotify Developer App** — developer.spotify.com, create app, get client ID + secret, add `https://deepcutsai.com/auth/spotify/callback` as redirect URI
+- [ ] **Stripe account** — stripe.com, create Product ("Vynl Pro") with $4.99/mo Price, get API keys + webhook secret
+- [ ] **Cloudflare account** — free, point deepcutsai.com nameservers there for DNS + CDN + DDoS protection
+- [ ] **Resend account** — resend.com, for transactional emails (signup, password reset), verify domain
+- [ ] **Email receiving** — Cloudflare email routing (free) to forward hello@deepcutsai.com to personal inbox
+
+## Legal (required for SaaS)
+
+- [ ] **Privacy Policy** — collecting emails, Spotify data, listening habits. Use Termly (free) or iubenda
+- [ ] **Terms of Service** — liability, acceptable use, refund policy
+- [ ] **Cookie banner** — required for EU users
+- [ ] **Stripe requirements** — refund policy and business address on site
+
+## Business
+
+- [ ] **Business entity** — sole proprietorship to start, LLC ($50-200) for protection
+- [ ] **Business bank account** — where Stripe deposits go (personal works to start)
+- [ ] **Stripe tax settings** — configure sales tax collection
+
+## Infrastructure Setup
+
+- [ ] **Hostinger VPS** — provision server
+- [ ] **Point DNS** — A record for deepcutsai.com to VPS IP (via Cloudflare)
+- [ ] **Clone repo on VPS** — pull from Gitea
+- [ ] **Fill in backend/.env** — all real API keys
+- [ ] **Run deploy.sh** — Caddy handles SSL automatically
+- [ ] **Set up DB backups** — cron job running backup.sh
+
+## Before Launch
+
+- [ ] **Test full flow** — register, connect Spotify, import playlist, get recommendations, upgrade to Pro
+- [ ] **Spotify quota extension** — new apps limited to 25 users in Development Mode, submit extension request to go public. **Takes 2-6 weeks — do this ASAP**
+- [ ] **Set Anthropic spend limit** — cap monthly spend in console
+- [ ] **Set Stripe webhook URL** — point to https://deepcutsai.com/api/billing/webhook
+
+## Nice to Have for Launch
+
+- [ ] **Landing page copy** — real marketing copy
+- [ ] **Open Graph / social meta tags** — for sharing on Twitter/Discord
+- [ ] **Analytics** — Google Analytics or Plausible
+- [ ] **Error tracking** — Sentry free tier
+- [ ] **Uptime monitoring** — UptimeRobot (free) or similar
+
+## Critical Path
+
+The **Spotify quota extension** is the longest lead time item (2-6 weeks). Start that application immediately, even before everything else is ready. Without it, only 25 users can connect Spotify.