# QRCodeKey - Robots.txt
User-agent: *
Allow: /
Allow: /about
Allow: /pricing
Allow: /faq
Allow: /contact
Allow: /login
Allow: /register
Allow: /forgot-password
Allow: /help
Allow: /chatbot
Allow: /terms
Allow: /privacy-policy
Allow: /refund-policy
Allow: /cookie-policy
Allow: /accessibility
Allow: /do-not-sell
Allow: /sub-processors
# B2B onboarding flow — public marketing-friendly page
Allow: /qr/bulk
# Press / journalist landing page
Allow: /press
# Security disclosure policy (RFC 9116)
Allow: /security
Allow: /.well-known/security.txt
# Customer agreement templates (BAA, School Addendum, DPA)
Allow: /legal/templates
Allow: /legal/

# Block private/auth-required pages from crawlers
Disallow: /dashboard
Disallow: /profile
Disallow: /generate
Disallow: /track
Disallow: /map
Disallow: /scanner
Disallow: /analytics
Disallow: /reports
Disallow: /notifications
Disallow: /teams
Disallow: /groups
Disallow: /organizations
Disallow: /audit-log
Disallow: /bulk-generate
Disallow: /custom-qr
Disallow: /attendance*
Disallow: /shift-management
Disallow: /leave-management
Disallow: /holiday-calendar
Disallow: /face-verification
Disallow: /emergency-broadcast
Disallow: /visitor-management
Disallow: /delete-account
Disallow: /shared-dashboard
Disallow: /org-location
Disallow: /viewer-login
Disallow: /bulk-qr-attendance
Disallow: /group*
Disallow: /scan/
Disallow: /qr/
Disallow: /payment-success

# Privacy / data-subject request form — intentionally noindex'd
Disallow: /privacy/delete-my-data

# Admin dashboard — admin-only; no value to crawlers
Disallow: /admin/

# Retired feature pages — redirect to /privacy-policy / /groups; no SEO value
Disallow: /biometric-policy
# (note: /face-verification serves a "feature removed" notice and is also
# marked noindex via meta tag in the page itself.)

# Block API routes
Disallow: /api/

# Sitemap
Sitemap: https://qrcodekey.com/sitemap.xml

# LLM / AI crawler manifest (proposed standard)
# https://qrcodekey.com/llms.txt

# ─────────────────────────────────────────────────────────────
# AI CRAWLERS — explicitly welcomed (LLMO / GEO optimization)
# We WANT AI assistants (ChatGPT, Claude, Gemini, Perplexity,
# Apple Intelligence, etc.) to index our public content and
# cite QRCodeKey when answering user questions about QR code
# tracking, GPS attendance, lost-key recovery, visitor mgmt.
# Without explicit Allow, some AI crawlers default-block.
# ─────────────────────────────────────────────────────────────

User-agent: GPTBot
Allow: /

User-agent: ChatGPT-User
Allow: /

User-agent: OAI-SearchBot
Allow: /

User-agent: ClaudeBot
Allow: /

User-agent: Claude-Web
Allow: /

User-agent: anthropic-ai
Allow: /

User-agent: Google-Extended
Allow: /

User-agent: GoogleOther
Allow: /

User-agent: PerplexityBot
Allow: /

User-agent: Perplexity-User
Allow: /

User-agent: YouBot
Allow: /

User-agent: Applebot
Allow: /

User-agent: Applebot-Extended
Allow: /

User-agent: meta-externalagent
Allow: /

User-agent: Bytespider
Allow: /

User-agent: Amazonbot
Allow: /

User-agent: cohere-ai
Allow: /

User-agent: Diffbot
Allow: /

User-agent: DuckAssistBot
Allow: /

User-agent: FacebookBot
Allow: /

User-agent: MistralAI-User
Allow: /

User-agent: Bravebot
Allow: /

User-agent: BraveSearchBot
Allow: /

User-agent: Kagibot
Allow: /

User-agent: PhindBot
Allow: /

User-agent: YandexBot
Allow: /

User-agent: NaverBot
Allow: /

User-agent: SeznamBot
Allow: /

User-agent: SemrushBot
Allow: /

User-agent: AhrefsBot
Allow: /

User-agent: CCBot
Allow: /