diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 2ca69ef40e44754092bcbf7b9c1f24b3e03dd02a..dfb604e3da1867871f5533f1ca47b99d157df121 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -76,6 +76,17 @@ build:
   script:
     - npm run build -- --base-href=/cassiopee/$CI_COMMIT_REF_NAME/
 
+clean-stale-branches:
+  stage:
+    - deploy
+    - deploy-stable
+  only:
+    - pushes
+    - tags
+    - web
+  script:
+    - nodejs scripts/remove-stale-branches.sh $DEPLOY_HOST_LOGIN $DEPLOY_URL
+
 deploy:
   stage: deploy
   only:
diff --git a/scripts/release-version.sh b/scripts/release-version.sh
index 128616f6f8d64d600977b099bb84f9c726a356a2..9952d413406c8dcddf72199ad1a83ef9a29b62b7 100755
--- a/scripts/release-version.sh
+++ b/scripts/release-version.sh
@@ -51,7 +51,7 @@ rm "./$TMP_RELEASES_FILE"
 scp "release/Cassiopée Setup $VERSION.exe" "release/fr.irstea.cassiopee_${VERSION}_amd64.deb" "release/cassiopee-$VERSION.apk" "release/Cassiopée-${VERSION}-mac.zip" "$HOST_LOGIN:$RELEASES_DIR/"
 
 # symlink "latest" version for each platform
-ssh $HOST_LOGIN /bin/bash << "EOF"
+ssh $HOST_LOGIN /bin/bash << EOF
     cd "$RELEASES_DIR"
     ln -sf "Cassiopée Setup $VERSION.exe" "windows-latest.exe"
     ln -sf "fr.irstea.cassiopee_${VERSION}_amd64.deb" "linux-latest.deb"
diff --git a/scripts/remove-stale-branches.sh b/scripts/remove-stale-branches.sh
new file mode 100755
index 0000000000000000000000000000000000000000..12d3562c5e24a9250a8c2dc6f53455dd9e69347c
--- /dev/null
+++ b/scripts/remove-stale-branches.sh
@@ -0,0 +1,38 @@
+#!/bin/bash
+
+# Supprime du serveur Web les "builds" de Cassiopée correspondant à des branches ou des
+# tags qui n'existent plus dans le dépôt.
+# Conçu pour être utilisé par Gitlab CI/CD
+
+if [ "$#" -lt 2 ]; then
+    echo "usage: $0 login@server /var/www/deploy_dir"
+    exit 1
+fi
+
+HOST_LOGIN="$1"
+DEPLOY_DIR="$2"
+# DEPLOY_DIR="/tmp/cassiopee" # debug
+
+echo "remove-stale-branches.sh: cleaning directory $DEPLOY_DIR on host $HOST_LOGIN"
+
+nghyd_branches=$(git ls-remote --heads origin|awk '{print $2}'|awk 'BEGIN{FS="/"} {print $3}')
+nghyd_tags=$(git tag)
+TNB="$nghyd_branches $nghyd_tags"
+
+ssh $HOST_LOGIN /bin/bash << EOF
+    cd $DEPLOY_DIR
+    LOCALTNB="$TNB"
+    for d in \$(ls -d *); do
+        found=0
+        for tag_or_branch in \$LOCALTNB; do
+            if [[ \$d == \$tag_or_branch ]]; then
+                found=1
+                break
+            fi
+        done
+        if (( \$found == 0 )); then
+            echo "suppression de branche/tag obsolète \$d"
+            rm -rf \$d
+        fi
+    done
+EOF