# Private app areas — nothing indexable behind auth, don't spend crawl budget here. # Token flows (/reset-password, /verify-email, /forgot-password) are intentionally # NOT disallowed: they carry , which crawlers # can only see if they are allowed to fetch the page. User-agent: * Disallow: /user/ Disallow: /settings/ Disallow: /upgrade Disallow: /search Disallow: /auth/ Sitemap: https://datrade.io/sitemap.xml