Website translation & localization for Base44 — Platform guide

1. Create the right project

Sign in to GoLocal → New Project → Base44. Register the exact published host, plus only the owned preview domains you use. Set the original interface language to the authored UI language, for example English—not the visitor’s French or the language of client records. Review widget languages and service limits. Use only this project’s public browser key; never a Base44 token, provider or database secret. Domain restrictions help, but Origin is not administrative authentication.

2. Choose an allowed editing path

Unzip the package and read README.txt. Use the official source-generation chat with ai-editor-prompt.txt AND the supplied helper/provider files. Review the resulting diff. In our account, manual Code editing and ZIP export required a paid Base44 plan; source generation used existing credits. Check your own entitlements. Do not bypass a quota or buy an upgrade just to follow this recipe.

Base44 → Code Tab ↗

3. Keep a strict public boundary

Keep the two source files together; merge public-layout-example.jsx into the existing PUBLIC shell. Mount one provider after committed public content. Exactly one #golocal-public contains authored navigation, headings and public pages only. Keep private routes and portal hosts outside it. Exclude saved customer names/descriptions before collection with data-user-content or data-gl-private. Exclude technical references with data-gl-record-id. Never add a generic body-wide script or replace SDK auth gates/router.

// Merge into your EXISTING PUBLIC shell; copy both supplied source files first.
import GoLocalPublicProvider from './integrations/GoLocalPublicProvider.jsx';

// Exactly one #golocal-public wraps only authored public content.
// Private routes/portals stay outside. Do not replace your router/auth gates.
// Mount once after the committed public DOM:
<GoLocalPublicProvider projectKey="YOUR_PROJECT_KEY" />

// Disable: remove this import/mount, rebuild, Publish and fully reload.
// The adapter pins runtime 1.3.2 + SRI; do not add another script.

<span>Source name</span>
<span data-user-content translate="no">Travail à domicile</span>
<div id="golocal-private-host" data-gl-private translate="no" />

4. Filter by identity, not translated captions

Our demo keeps category objects and record IDs stable: objects and nf-object-01 do not become translated strings. The visitor sees Objets and La Bouilloire n°4. Its own public search matches bouilloire without rewriting the input and returns that same record. This is application search logic, not automatic reverse translation for all Base44 inputs. Bubble’s GoLocal Query element is not a Base44 component.

en

Objects · The Kettle No. 4

fr

Objets · La Bouilloire n°4

ID / category

nf-object-01 / objects

Input → result

bouilloire → nf-object-01

6. Publish, test and disable

Compile, review and explicitly Publish, then reload the actual published URL—not just the editor sandbox. Check one root, one loader/widget, runtime 1.3.2 and its SRI. Test accented typing, saved names, native filters, SPA routes, delayed content, manual edits and a warm revisit. To disable, remove only the provider import/mount, rebuild, publish and fully reload; verify no loader/widget or service request. Removing a script tag is not hot-uninstall. Restore your reviewed layout from version history to re-enable.

7. Scope, costs and remaining checks

The source adapter is free; GoLocal SaaS plans and Base44 hosting/code access are separate. Removal neither cancels billing nor deletes translations. Private SDK-auth initial entry, delayed auth boundaries, independent accounts, stricter CSP, full accessibility, physical devices and broad RTL still need acceptance. The lab’s private panel is not authentication. Client-side translation does not create indexed localized URLs, translate checkout/email or guarantee rankings. Do not run two translators on native-localized content.

Security note: the native scanner showed an exposed-secret classification while its explanation said SRI is a hash and no hardcoded secrets were found. The warning was retained, not dismissed. This is not a clean-scan certification; review your app’s report without disabling SRI or modifying SDK auth blindly.