# ============================================================================
# WishlistMe — robots.txt
#
# Strategy: full-open for public content (landing + /gift-ideas hub and guides),
# explicit disallow for user-private pages and API. Extended AI allow-list so
# the guide content gets cited by ChatGPT / Claude / Perplexity / Gemini.
# ============================================================================

User-agent: *
Allow: /
Disallow: /login
Disallow: /register
Disallow: /dashboard
Disallow: /profile
Disallow: /activity
Disallow: /reserved
Disallow: /api/
Disallow: /admin
# Secret Santa: the localised landing (/santa, /de/santa, /ua/santa, ...) stays crawlable;
# everything BELOW it is private (organiser pages, personal pair links, invite links carrying
# a token). The Disallow patterns end in a slash, so they match /santa/new, /de/santa/<id>...
# but NOT the landing itself (no trailing slash); the explicit Allow lines ($ = end of URL)
# just document that intent.
Disallow: /santa/
Disallow: /*/santa/
Allow: /santa$
Allow: /*/santa$
Disallow: /*?*reset=
Disallow: /*?*verify=

# ----------------------------------------------------------------------------
# AI crawlers — allow full access to gift-ideas and public content.
# Gift-guide pages are designed to be LLM-citable (TL;DR, FAQ, sources),
# so giving these crawlers unrestricted access is intentional.
# ----------------------------------------------------------------------------

# A crawler that matches a named group ignores the "*" group above, so the private paths must be
# repeated here: one group for all of them (several User-agent lines share the rules below).
User-agent: GPTBot
User-agent: ChatGPT-User
User-agent: OAI-SearchBot
User-agent: ClaudeBot
User-agent: Claude-Web
User-agent: anthropic-ai
User-agent: Google-Extended
User-agent: PerplexityBot
User-agent: Perplexity-User
User-agent: CCBot
User-agent: Applebot
User-agent: Applebot-Extended
User-agent: Meta-ExternalAgent
User-agent: Meta-ExternalFetcher
User-agent: FacebookBot
User-agent: Bytespider
User-agent: Amazonbot
User-agent: Diffbot
User-agent: YouBot
User-agent: cohere-ai
User-agent: MistralAI-User
Allow: /
Disallow: /login
Disallow: /register
Disallow: /dashboard
Disallow: /profile
Disallow: /activity
Disallow: /reserved
Disallow: /api/
Disallow: /admin
# Secret Santa: the localised landing (/santa, /de/santa, /ua/santa, ...) stays crawlable;
# everything BELOW it is private (organiser pages, personal pair links, invite links carrying
# a token). The Disallow patterns end in a slash, so they match /santa/new, /de/santa/<id>...
# but NOT the landing itself (no trailing slash); the explicit Allow lines ($ = end of URL)
# just document that intent.
Disallow: /santa/
Disallow: /*/santa/
Allow: /santa$
Allow: /*/santa$
Disallow: /*?*reset=
Disallow: /*?*verify=

# ----------------------------------------------------------------------------
# Sitemap — read by every crawler regardless of the groups above (Yandex, Bing and Google
# find the map from here even when a webmaster tool cannot take it, as with Yandex Webmaster's
# read-only "Файлы Sitemap" in Oct 2026).
# ----------------------------------------------------------------------------
Sitemap: https://wishlistme.app/sitemap.xml