Keep authenticated portals out of Google: noindex, robots, and sitemaps
Login, app, and operator routes should not appear in the sitemap or in snippets. Use noindex, robots, and a public-only URL inventory — from Google’s own indexing guidance.
Kiwi Blog 161 articles · Page 1 of 7
Practical articles on websites, client portals, SaaS, and technical SEO. Understand the trade-offs before you invest in the build.
Search all articles, or browse by topic below.
Login, app, and operator routes should not appear in the sitemap or in snippets. Use noindex, robots, and a public-only URL inventory — from Google’s own indexing guidance.
A walkthrough environment beats a pitch deck when buyers need to see jobs, empty states, and failure — not a montage. How to scope a demo you can actually show.
Workers plus D1 fit small, edge-hosted operator panels and portals with modest relational data. They are not a default for every product. A fit check from Cloudflare’s own docs.
Google’s destination-experience policy incorporates the Coalition for Better Ads. Sticky ads, auto-playing noisy video, and prestitial overlays are how a paid landing page gets disapproved even when the product is legal.
Credit-card applications are restricted financial advertising. Licenses, local disclosures, and Meta’s financial-products rules apply. A checklist that starts with the product, not the carousel.
Advertising credit cards, issuing, and card-linked payments is restricted financial advertising on Google and Meta. Treat licenses, APR disclosures, and destination review as the campaign. Lifestyle creative comes last.
Specialist crypto display networks exist because walled gardens ban ICOs, DeFi, and unlicensed exchanges. Buying that inventory does not make the product legal, brand-safe, or honest. A due-diligence guide.
content-visibility: auto can skip rendering off-screen cards. Without contain-intrinsic-size it causes CLS. How to use it on blog and listing pages.
A custom client portal is warranted when email cannot carry access control, audit, or a repeatable job. A practical sequence for B2B teams considering a portal they will own.
Embed a BI tool when analysts already live there. Custom-build a dashboard when the number is a product job with permissions, empty states, and a next action.
A success portal earns its login when clients can finish a job: see current work, upload evidence, or approve a milestone. A public status page is a different product.
A portal file room needs object-level permissions, virus-untrusted uploads, and expiry. A shared Drive folder is not a document room.
Meta requires a recognized license and written permission, via Meta Business Suite, to promote crypto exchanges, trading, lending, and wallets that buy, sell, swap, or stake. News, tax, and storage-only wallets are documented exceptions.
Measure page views and form starts without loading analytics by default. Consent Mode v2, one loader, and named events beat a tag soup — from Google’s own consent guidance.
Paid clicks inherit the page. Destination policy, AdsBot, Better Ads, and ordinary usability all hit the same URL. A pre-flight that is cheaper than a week of wasted Search or Meta spend.
A conversion is an event you defined, fired after a real action, under a consent state the tag is allowed to use. Consent Mode v2 and the EU user consent policy sit on top of Google Ads conversion tracking.
Google’s 2026 crypto ads rules: education and mining hardware can run without certification; exchanges and wallets need licenses plus Google certification in approved countries; ICOs, DeFi, unhosted wallets, and affiliate aggregators stay banned.
AdsBot checks that the final URL works, matches the display domain, is crawlable, and is not a maze of pop-ups. A practical 2026 checklist from Google’s Destination Requirements policy — not a ROAS story.
Financial products and services ads must follow local law, and in many countries a Google verification of licenses and registration numbers. What the 2026 process changed — and what it does not certify.
Search is query-shaped demand. Performance Max is Google’s inventory blender. For B2B, the useful question is whether you can name the query and the landing page — not which campaign type is ‘best’.
Destination-not-accessible and destination-not-crawlable often mean AdsBot got a 403, a geo wall, or a robots.txt deny. How to allow the ads crawler without indexing operator routes.
Google’s 2026 Search Console generative-AI reports measure impressions in AI Overviews and AI Mode. Eligibility is ordinary technical SEO plus extractable answers — not a new ranking product.
GDN is Google’s owned-and-operated plus partner inventory under Google Ads policies. Open exchanges are a different contract. ads.txt, Better Ads, and destination rules decide whether you should be there at all.
If a machine can submit work, a human still has to accept, reject, or retry it. Design the queue as an object with states — not a chat log.
Put the thinking to work
Tell us about your website or product. We’ll help you identify the problem worth solving first, with a clear path to a scoped project.
Start a project