Search

# ───────────────────────────────────────────────
# robots.txt — Store Console
# ERP & E-commerce Platform — Protect Customer Privacy
# ───────────────────────────────────────────────
#
# Only public marketing and content pages are allowed
# for indexing. All sensitive, authenticated, and
# transactional paths are blocked to protect customer
# data and prevent private content from appearing in
# search results.
#
# Malicious bots ignore robots.txt — this is an SEO
# and privacy measure, NOT a security boundary.
# Authentication and authorization are enforced at
# the application level.

User-agent: *
Allow: /

# ── Admin Panel (all modules) ──────────────────
Disallow: /admin

# ── API (JSON endpoints only) ──────────────────
Disallow: /api/

# ── Authentication pages ───────────────────────
Disallow: /auth/
Disallow: /login
Disallow: /register
Disallow: /logout
Disallow: /forgot-password
Disallow: /reset-password
Disallow: /verify-email
Disallow: /email/
Disallow: /two-factor
Disallow: /user/

# ── Customer portal / My Account ───────────────
Disallow: /my-account
Disallow: /my-access
Disallow: /my-leaves
Disallow: /my-attendance

# ── User settings ─────────────────────────────
Disallow: /settings

# ── Shopping, cart & checkout (transactional) ──
Disallow: /cart
Disallow: /checkout
Disallow: /wishlist
Disallow: /orders/
Disallow: /milestone-payment/

# ── Broadcasting & WebSocket connections ───────
Disallow: /broadcasting/
Disallow: /app/
Disallow: /apps/

# ── Payment & webhooks ─────────────────────────
Disallow: /payment/
Disallow: /webhooks/

# ── Customer support & chat ────────────────────
Disallow: /support/
Disallow: /chat/

# ── Notifications ──────────────────────────────
Disallow: /notifications/

# ── Subscriptions & fulfillment ────────────────
Disallow: /subscription/
Disallow: /fulfillment/

# ── Delivery & logistics ───────────────────────
Disallow: /delivery-portal/
Disallow: /track/

# ── POS ────────────────────────────────────────
Disallow: /pos/

# ── Project & task management ─────────────────
Disallow: /momentum/

# ── Gallery & media ────────────────────────────
Disallow: /gallery/

# ── Storage — only storefront product images are crawlable ─
#     All other uploaded files (HRM docs, settings, avatars,
#     AI-generated, etc.) are blocked for privacy.
Allow: /storage/product_images/
Allow: /storage/variant_images/
Allow: /storage/category_images/
Allow: /storage/brand_logos/
Disallow: /storage/

# ── Private file serving (avatars, imports, sensitive docs) ─
Disallow: /private/

# ── Search result pages ────────────────────────
Disallow: /search

# ── Crawl rate limit (be kind to our servers) ──
Crawl-Delay: 10

# ── Sitemap ────────────────────────────────────
Sitemap: https://storeconsole.com/sitemap.xml