diff --git a/apps/web/_redirects b/apps/web/_redirects
new file mode 100644
index 0000000..4380b4e
--- /dev/null
+++ b/apps/web/_redirects
@@ -0,0 +1,5 @@
+# Downloads are GitHub release assets; links shared before the move keep working.
+/downloads/openfuel-android.apk https://github.com/AKolenda/openfuel/releases/latest/download/openfuel-android.apk 302
+/downloads/openfuel-android.apk.sha256 https://github.com/AKolenda/openfuel/releases/latest/download/openfuel-android.apk.sha256 302
+/downloads/openfuel-source.zip https://github.com/AKolenda/openfuel/releases/latest/download/openfuel-source.zip 302
+/downloads/* https://github.com/AKolenda/openfuel/releases/latest 302
diff --git a/tests/browser_checks.py b/tests/browser_checks.py
index 3f117be..9e876c7 100644
--- a/tests/browser_checks.py
+++ b/tests/browser_checks.py
@@ -228,6 +228,9 @@ def open_iframe(page,selector):
                 check(prefix+'Android APK is a real download link',page.locator('a[data-i18n="a-build"]').get_attribute('href')=='https://github.com/AKolenda/openfuel/releases/latest/download/openfuel-android.apk')
                 page.locator('.phone-play').click()
                 frame=open_iframe(page,'#demo-frame')
+                # The app shows the denial once the browser answers its location request.
+                try:frame.locator('#location-status',has_text='permission is off').wait_for(timeout=10000)
+                except PlaywrightError:pass
                 check(prefix+'website location denial has no sample fallback',frame.locator('.station-card').count()==0 and 'permission is off' in frame.locator('#location-status').inner_text())
                 page.locator('#demo-dialog [data-close]').click()
                 if width in [1440,390]:page.screenshot(path=str(OUT/f'website-{width}.png'),full_page=False)