# Buzzega — https://buzzega.com
#
# ALLOW the pages that describe the product; DISALLOW everything that is either behind a
# login, specific to one live game, or arrives by emailed token. Crawling those wastes budget
# on pages that render an empty shell for a signed-out crawler, and — for the token routes —
# would place single-use links in a search index.
#
# Note this is advisory, not a security control. Nothing here is the reason those pages are
# protected: the route guard and the API's 401/403s are. See ADMIN_PROTECTED_SCREENS.

User-agent: *

# Signed-in areas. A crawler gets bounced to a login screen anyway.
Disallow: /host/
Disallow: /admin
Disallow: /admin/
Disallow: /settings
Disallow: /checkout

# Live-game and per-session screens. Meaningless without a game in progress, and the
# query strings make them effectively infinite.
Disallow: /play
Disallow: /play/
Disallow: /spectate
Disallow: /replay
Disallow: /sound-check

# Single-use links delivered by email. These must never be indexed.
Disallow: /reset-password
Disallow: /verify-email
Disallow: /confirm-email-change

# The signup page is the one /host/ path worth indexing — it is the conversion page.
Allow: /host/signup

Sitemap: https://buzzega.com/sitemap.xml