# gotlinq
#
# This file used to be a blanket `Disallow: /`, which is why Google reported
# "No information is available for this page" for gotlinq.com itself. Crawling
# is now allowed for everything public, and refused for two things it must
# never reach: the signed-in app, and the URLs where the token IS the
# credential — an invoice, a download, a review request, a client portal.
# Those are unguessable, but they should not be in an index either.

User-agent: *
Allow: /

# The signed-in app. Nothing here renders for a crawler anyway.
Disallow: /home
Disallow: /bookmarks
Disallow: /dashboard
Disallow: /public-page
Disallow: /links
Disallow: /qr-codes
Disallow: /campaigns
Disallow: /insights
Disallow: /invoices
Disallow: /invoice-settings
Disallow: /clients
Disallow: /products
Disallow: /orders
Disallow: /messages
Disallow: /enquiries
Disallow: /my-enquiries
Disallow: /later
Disallow: /services
Disallow: /offers
Disallow: /reviews
Disallow: /social
Disallow: /settings
Disallow: /usage
Disallow: /bookings
Disallow: /pages
Disallow: /subscription
Disallow: /subscription-success
Disallow: /auth

# Token-as-credential routes. Never index these.
Disallow: /i/
Disallow: /d/
Disallow: /r/
Disallow: /claim/
Disallow: /c/
Disallow: /b/

# The short-link redirector: the destination should be indexed, not the hop.
Disallow: /l/

# The API.
Disallow: /api/

Sitemap: https://gotlinq.com/sitemap.xml