# robots.txt for heidi.living

User-agent: *
# How the content may be used (contentsignals.org, HH-S55): in search
# results, as input to AI answers, and for AI training. It says what this
# file already allowed: every crawler, the AI ones included, may read the
# public pages.
Content-Signal: search=yes, ai-input=yes, ai-train=yes
Allow: /

# /booking itself is the entry form and is linked from the nav, so it stays
# crawlable. Everything BELOW it is per-guest — the signing page, the
# confirmation and the audit lookup are reached only from a form post or with a
# token, and none of them should be indexed.
#
# The trailing slash is what makes that distinction: "Disallow: /booking" would
# match /booking as well and take the entry form out of the index.
Disallow: /booking/
Disallow: /dashboard
# A verification link carries a one-time token (HH-S16).
Disallow: /verify-email

Sitemap: https://heidi.living/sitemap.xml