2025 SEO Strategy: Less Copywriting, More Engineering

Introduction: In the AI Content Era, Technical SEO is Your Ace in the Hole Introduction: In the AI Content Era, Technical SEO is Your Ace in the Hole As AI-driven tools flood the internet with content, the old rules of SEO are becoming obsolete. When everyone can generate articles, blog posts, and descriptions in seconds, content itself is no longer a differentiator—it’s a commodity. This paradigm shift forces search engines like Google to look beyond the text and focus on what truly matters: technical integrity and user experience (UX). This is where your advantage lies. EXAMPLE HERE EXAMPLE HERE EXAMPLE HERE How AI Content Raises the Quality Bar for Everyone How AI Content Raises the Quality Bar for Everyone The mass production of AI-generated content devalues mediocre articles and forces a flight to quality. Search engines are adapting by prioritizing signals that can't be easily faked: site performance, security, accessibility, and structured data. Your site’s technical foundation is no longer just a "ranking factor"; it's becoming the primary lens through which search algorithms will judge your content's worthiness. Why a 2025 Site Audit is a Necessity, Not a Recommendation Why a 2025 Site Audit is a Necessity, Not a Recommendation The technical standards of last year are already outdated. Google’s requirements for Core Web Vitals, HTTPS, mobile-first indexing, and rich-snippet-enabling schemas are constantly evolving. Running a comprehensive technical SEO audit in 2025 isn't just good practice; it's a mandatory check-up to ensure your digital asset isn't slowly becoming invisible to both search engines and users. The Shortcut to Technical Perfection: A Pre-Built Starter The Shortcut to Technical Perfection: A Pre-Built Starter Instead of spending hundreds of hours auditing, patching, and re-configuring, you can start with a foundation built for the new era of search. For new projects, using an advanced, SEO-first starter is the most efficient way to gain a competitive edge from day one. It provides a fully optimized technical structure out-of-the-box, from metadata generation to a complete Progressive Web App (PWA) setup. You can explore a reference implementation of this architecture with the AIFA SEO-First PWA Starter on GitHub: https://github.com/aifa-agi/aifa-v2. AIFA SEO-First PWA Starter https://github.com/aifa-agi/aifa-v2 The Anatomy of a Modern Starter: What's Under the Hood? The Anatomy of a Modern Starter: What's Under the Hood? To meet the demands of tomorrow's web, a starter's architecture must be more than a collection of libraries; it needs to be a synergistic system where each component is engineered for performance, scalability, and maintainability. A future-ready Next.js starter is built on a few fundamental pillars that eliminate chaos and enforce consistency across the application. App Config — The Application's Central Nervous System App Config — The Application's Central Nervous System The app-config.ts file acts as a single source of truth for all critical application parameters. Instead of hardcoding URLs, brand names, or SEO settings across different files, this TypeScript module centralizes everything. It intelligently sources values from environment variables and creates a strictly-typed configuration object accessible anywhere. This approach solves the classic problem of managing different settings for development, staging, and production environments, allowing a single codebase to adapt without modification. app-config.ts Construct Metadata — The Perfect Metadata Factory Construct Metadata — The Perfect Metadata Factory Inconsistent or missing metadata is an SEO death sentence. The construct-metadata.ts utility functions as a universal factory for generating complete and consistent Next.js Metadata objects for every page. By passing a minimal set of page-specific arguments (like title, description, and pathname), it automatically generates canonical URLs, a full suite of OpenGraph and Twitter Card tags, icons, and even search engine verification codes. This eliminates human error and ensures that every page is perfectly optimized for search crawlers and social media platforms. construct-metadata.ts Environment Variables — Configuration Without Recompilation Environment Variables — Configuration Without Recompilation The .env file provides a powerful abstraction layer between code and configuration. All variables prefixed with NEXT_PUBLIC_ are exposed to the browser, while the rest remain server-only for security. This system allows you to manage branding, SEO indexing rules, social media profiles, and PWA theme colors for different deployment environments without ever touching the source code. Need to rebrand the app or deploy to a new domain? Simply update the .env file and rebuild. This makes the application incredibly flexible and easy to manage at scale. .env NEXT_PUBLIC_ .env From Site to App: Engineering a Flawless PWA Experience From Site to App: Engineering a Flawless PWA Experience A Progressive Web App (PWA) is no longer a "nice-to-have" feature; it's a strategic necessity for user retention and engagement. Turning a website into an installable, offline-capable application that users will actually want on their home screen requires a thoughtful technical implementation. It’s about creating an experience so seamless and reliable that it rivals a native app. GitHub here GitHub here GitHub here Service Workers and Caching Strategies: The Magic of Offline Access Service Workers and Caching Strategies: The Magic of Offline Access The Service Worker is the heart of a PWA, acting as a programmable network proxy that intercepts and handles network requests. A robust starter implements sophisticated caching strategies to ensure instant loading and offline functionality. This isn't a one-size-fits-all approach; it's about differentiated caching: CacheFirst for immutable assets like Google Fonts and versioned static files, which are served instantly from the cache. NetworkFirstfor API routes and page navigations, prioritizing fresh data from the network but falling back to a cached version when offline.This dual strategy provides the best of both worlds: speed and data freshness. CacheFirst for immutable assets like Google Fonts and versioned static files, which are served instantly from the cache. CacheFirst for immutable assets like Google Fonts and versioned static files, which are served instantly from the cache. CacheFirst NetworkFirstfor API routes and page navigations, prioritizing fresh data from the network but falling back to a cached version when offline.This dual strategy provides the best of both worlds: speed and data freshness. NetworkFirstfor API routes and page navigations, prioritizing fresh data from the network but falling back to a cached version when offline.This dual strategy provides the best of both worlds: speed and data freshness. NetworkFirst The Dynamic Web Manifest: Your App's Installation Key The Dynamic Web Manifest: Your App's Installation Key The manifest.ts file is a JSON file that tells the browser how your PWA should behave when "installed" on a user's device [attached_file:1]. A truly modern starter generates this manifest dynamically from the central app-config. This allows you to control the app's name, icons for different resolutions, theme colors, and even promotional screenshots for a richer install prompt—all from one configuration file. This turns a simple website into a polished, installable application with a native-like presence. manifest.ts app-config Push Notifications and Background Sync: The User Re-Engagement Toolkit Push Notifications and Background Sync: The User Re-Engagement Toolkit A Service Worker's job doesn't end with caching. It's also responsible for powerful re-engagement features that were once exclusive to native apps. The starter's Service Worker implementation handles: Push Notifications: Displaying timely, relevant notifications to bring users back to the app, even when it's closed. **Background Sync:**Retrying failed network requests (like a submitted form) automatically once the user's connection is restored, ensuring data is never lost.These features transform a passive website into a proactive communication channel, significantly boosting user retention and application reliability. Push Notifications: Displaying timely, relevant notifications to bring users back to the app, even when it's closed. Push Notifications: **Background Sync:**Retrying failed network requests (like a submitted form) automatically once the user's connection is restored, ensuring data is never lost.These features transform a passive website into a proactive communication channel, significantly boosting user retention and application reliability. A Practical Guide: How to Implement This Architecture A Practical Guide: How to Implement This Architecture Understanding the theory is one thing; putting it into practice is another. The real power of this starter architecture lies in its simple, repeatable patterns that guarantee every new page is fully optimized for SEO, PWA functionality, and performance from the moment it's created. Here’s how you can apply these patterns as a developer. The Three Pillars of an SEO-Optimized Page: Metadata, JSON-LD, and Semantics The Three Pillars of an SEO-Optimized Page: Metadata, JSON-LD, and Semantics Every page, regardless of its content, should be built on a three-component model: Metadata Export: Instead of manually adding tags, you export a metadata object generated by the constructMetadata() function. You only need to provide page-specific details like title, description, and pathname; the function handles the rest, including canonicals and OpenGraph tags. JSON-LD Schemas: Structured data is crucial for earning rich snippets in search results []. The starter provides ready-made generator functions (e.g., generateArticleSchema(), generateProductSchema()) that create valid JSON-LD, which you embed into the page using a Next.js component with the beforeInteractive strategy. Semantic HTML: Your JSX should be structured semantically with a single , a logical heading hierarchy (H2 → H3), and proper use of tags like and . This provides clear context for search engine crawlers and improves accessibility. Metadata Export: Instead of manually adding tags, you export a metadata object generated by the constructMetadata() function. You only need to provide page-specific details like title, description, and pathname; the function handles the rest, including canonicals and OpenGraph tags. Metadata Export: metadata constructMetadata() title description pathname JSON-LD Schemas: Structured data is crucial for earning rich snippets in search results []. The starter provides ready-made generator functions (e.g., generateArticleSchema(), generateProductSchema()) that create valid JSON-LD, which you embed into the page using a Next.js component with the beforeInteractive strategy. JSON-LD Schemas: generateArticleSchema() generateProductSchema() beforeInteractive Semantic HTML: Your JSX should be structured semantically with a single , a logical heading hierarchy (H2 → H3), and proper use of tags like and . This provides clear context for search engine crawlers and improves accessibility. Semantic HTML: Content-Specific Patterns: From Blog Posts to Product Pages Content-Specific Patterns: From Blog Posts to Product Pages While the core model is universal, you must adapt it to the specific content type to maximize SEO impact. The starter provides clear patterns for this: Blog Pages (contentType: 'blog'): Use generateArticleSchema() to create a BlogPosting schema with author details, publication dates, and word count. This helps Google understand it's editorial content. Product Pages (contentType: 'product'): Use generateProductSchema() to add crucial e-commerce data like price, currency, brand, and aggregate ratings. This is what powers price and review stars in search results. FAQ Pages: Use generateFAQSchema() to structure questions and answers, which can create an interactive accordion-style rich snippet directly in Google. Deeply Nested Pages: Use generateBreadcrumbSchema() to create a breadcrumb trail, improving site navigation for both users and crawlers. Blog Pages (contentType: 'blog'): Use generateArticleSchema() to create a BlogPosting schema with author details, publication dates, and word count. This helps Google understand it's editorial content. Blog Pages ( contentType: 'blog' generateArticleSchema() BlogPosting Product Pages (contentType: 'product'): Use generateProductSchema() to add crucial e-commerce data like price, currency, brand, and aggregate ratings. This is what powers price and review stars in search results. Product Pages ( contentType: 'product' generateProductSchema() FAQ Pages: Use generateFAQSchema() to structure questions and answers, which can create an interactive accordion-style rich snippet directly in Google. FAQ Pages generateFAQSchema() Deeply Nested Pages: Use generateBreadcrumbSchema() to create a breadcrumb trail, improving site navigation for both users and crawlers. Deeply Nested Pages generateBreadcrumbSchema() Critical Rules You Can't Afford to Break Critical Rules You Can't Afford to Break This architecture's integrity depends on a few non-negotiable rules: Metadata Uniqueness: Every page must have a unique title and description. Duplication confuses search engines and hurts rankings. Correct pathname: The pathname you pass to constructMetadata() must exactly match the page's route to generate the correct canonical URL. An incorrect canonical can be devastating for SEO. Correct contentType: The contentTypeparameter determines the OpenGraph type and which JSON-LD schema to apply. Mismatching these can lead to improper social sharing previews and lost rich snippet opportunities.Following these simple patterns and rules ensures that every line of code you write contributes to a technically flawless, high-performing application. Metadata Uniqueness: Every page must have a unique title and description. Duplication confuses search engines and hurts rankings. Metadata Uniqueness must Correct pathname: The pathname you pass to constructMetadata() must exactly match the page's route to generate the correct canonical URL. An incorrect canonical can be devastating for SEO. Correct pathname pathname constructMetadata() Correct contentType: The contentTypeparameter determines the OpenGraph type and which JSON-LD schema to apply. Mismatching these can lead to improper social sharing previews and lost rich snippet opportunities.Following these simple patterns and rules ensures that every line of code you write contributes to a technically flawless, high-performing application. Correct contentType contentType Based on a detailed analysis of the provided HTML Resource : https://aifa-v2.vercel.app Based on a detailed analysis of the provided HTML , this project exemplifies a high standard of technical optimization for both Search Engine Optimization (SEO) and Progressive Web App (PWA) functionality. The architecture is built on modern best practices, ensuring exceptional performance, accessibility, and indexability. Excellently Implemented Aspects (Top-Tier) These components are executed at an exceptionally high level, serving as a benchmark for modern web applications. Comprehensive Metadata: The project utilizes an exhaustive set of metadata. It includes not only basic title and description tags but also advanced meta tags for Open Graph (for Facebook, LinkedIn) and Twitter Cards, ensuring attractive and informative link previews on social media. Furthermore, author, creator, and publisher meta tags are specified, which reinforces content authority. Advanced JSON-LD Schemas: The integration of multiple, detailed JSON-LD schemas (WebSite, Organization, FAQPage) is an outstanding practice. This allows search engines to better understand the content and generate rich snippets in search results, such as FAQ accordions, which can significantly increase click-through rates (CTR). Dynamic robots.txt and sitemap.xml Generation: The code clearly indicates that robots.txt and sitemap.xml are generated dynamically, which is a state-of-the-art practice. This enables programmatic control over indexing rules for various search crawlers (including AI bots like GPTBot) and automates sitemap updates, including crucial i18n support for multilingual versions via hreflang for international SEO. Full-Fledged PWA Integration: The project is fully installable as a PWA. This is achieved through a manifest.webmanifest file that defines icons of various sizes (including maskable), the app name, theme colors, and a start URL [file:1]. The registration of a Service Worker (register-sw.js) enables offline access and advanced caching strategies, which enhances user experience and performance. Configuration-Driven Security and Performance: Implementing strict security headers (CSP, HSTS, X-Frame-Options) and performance optimizations (SWC minification, caching) at the Next.js configuration level is the hallmark of a mature and secure application. Well-Implemented Aspects (With Room for Enhancement) These areas are implemented to a high standard; however, focusing on the following refinements could elevate them to a level of excellence. Semantic Markup and Accessibility: The use of main, section, h1, h2, and aria-labelledby creates a solid semantic foundation. However, to achieve a gold standard, a thorough audit of all interactive elements is recommended to ensure they have comprehensive aria- attributes and roles, especially within custom components. For instance, perfect keyboard navigation and state announcements for screen readers are vital for elements like tabs and custom buttons. Performance and Core Web Vitals: The project wisely uses preload for fonts and images, along with asynchronous script loading (async), which are excellent practices. The next step would be detailed profiling with tools like Google PageSpeed Insights for micro-optimizations in resource loading order. This would guarantee the best possible scores for Largest Contentful Paint (LCP) and Cumulative Layout Shift (CLS), particularly when dealing with dynamic content. Image Optimization: Utilizing the next/image component (indicated by data-nimg="1") is the standard for image optimization in Next.js. To enhance this further, one could ensure that the unoptimized={true} attribute is used only in exceptional cases and that precise width and height dimensions are always provided for images loaded from a CMS or database to prevent layout shifts. No-JavaScript Fallback ( ): The presence of a tag is an important step toward making content accessible to search crawlers and users with JavaScript disabled. While basic content is available, an ideal implementation would go beyond displaying a warning to providing full navigation and, where possible, form functionality through standard server actions. This would ensure not just "graceful degradation" but a complete experience for all users. Based on a detailed analysis of the provided HTML Resource : https://aifa-v2.vercel.app https://aifa-v2.vercel.app Based on a detailed analysis of the provided HTML , this project exemplifies a high standard of technical optimization for both Search Engine Optimization (SEO) and Progressive Web App (PWA) functionality. The architecture is built on modern best practices, ensuring exceptional performance, accessibility, and indexability. Excellently Implemented Aspects (Top-Tier) These components are executed at an exceptionally high level, serving as a benchmark for modern web applications. Comprehensive Metadata: The project utilizes an exhaustive set of metadata. It includes not only basic title and description tags but also advanced meta tags for Open Graph (for Facebook, LinkedIn) and Twitter Cards, ensuring attractive and informative link previews on social media. Furthermore, author, creator, and publisher meta tags are specified, which reinforces content authority. Advanced JSON-LD Schemas: The integration of multiple, detailed JSON-LD schemas (WebSite, Organization, FAQPage) is an outstanding practice. This allows search engines to better understand the content and generate rich snippets in search results, such as FAQ accordions, which can significantly increase click-through rates (CTR). Dynamic robots.txt and sitemap.xml Generation: The code clearly indicates that robots.txt and sitemap.xml are generated dynamically, which is a state-of-the-art practice. This enables programmatic control over indexing rules for various search crawlers (including AI bots like GPTBot) and automates sitemap updates, including crucial i18n support for multilingual versions via hreflang for international SEO. Full-Fledged PWA Integration: The project is fully installable as a PWA. This is achieved through a manifest.webmanifest file that defines icons of various sizes (including maskable), the app name, theme colors, and a start URL [file:1]. The registration of a Service Worker (register-sw.js) enables offline access and advanced caching strategies, which enhances user experience and performance. Configuration-Driven Security and Performance: Implementing strict security headers (CSP, HSTS, X-Frame-Options) and performance optimizations (SWC minification, caching) at the Next.js configuration level is the hallmark of a mature and secure application. Comprehensive Metadata: The project utilizes an exhaustive set of metadata. It includes not only basic title and description tags but also advanced meta tags for Open Graph (for Facebook, LinkedIn) and Twitter Cards, ensuring attractive and informative link previews on social media. Furthermore, author, creator, and publisher meta tags are specified, which reinforces content authority. Comprehensive Metadata title description author creator publisher Advanced JSON-LD Schemas: The integration of multiple, detailed JSON-LD schemas (WebSite, Organization, FAQPage) is an outstanding practice. This allows search engines to better understand the content and generate rich snippets in search results, such as FAQ accordions, which can significantly increase click-through rates (CTR). Advanced JSON-LD Schemas WebSite Organization FAQPage Dynamic robots.txt and sitemap.xml Generation: The code clearly indicates that robots.txt and sitemap.xml are generated dynamically, which is a state-of-the-art practice. This enables programmatic control over indexing rules for various search crawlers (including AI bots like GPTBot) and automates sitemap updates, including crucial i18n support for multilingual versions via hreflang for international SEO. Dynamic robots.txt sitemap.xml robots.txt sitemap.xml i18n hreflang Full-Fledged PWA Integration: The project is fully installable as a PWA. This is achieved through a manifest.webmanifest file that defines icons of various sizes (including maskable), the app name, theme colors, and a start URL [file:1]. The registration of a Service Worker (register-sw.js) enables offline access and advanced caching strategies, which enhances user experience and performance. Full-Fledged PWA Integration manifest.webmanifest maskable register-sw.js Configuration-Driven Security and Performance: Implementing strict security headers (CSP, HSTS, X-Frame-Options) and performance optimizations (SWC minification, caching) at the Next.js configuration level is the hallmark of a mature and secure application. Configuration-Driven Security and Performance Well-Implemented Aspects (With Room for Enhancement) These areas are implemented to a high standard; however, focusing on the following refinements could elevate them to a level of excellence. Semantic Markup and Accessibility: The use of main, section, h1, h2, and aria-labelledby creates a solid semantic foundation. However, to achieve a gold standard, a thorough audit of all interactive elements is recommended to ensure they have comprehensive aria- attributes and roles, especially within custom components. For instance, perfect keyboard navigation and state announcements for screen readers are vital for elements like tabs and custom buttons. Performance and Core Web Vitals: The project wisely uses preload for fonts and images, along with asynchronous script loading (async), which are excellent practices. The next step would be detailed profiling with tools like Google PageSpeed Insights for micro-optimizations in resource loading order. This would guarantee the best possible scores for Largest Contentful Paint (LCP) and Cumulative Layout Shift (CLS), particularly when dealing with dynamic content. Image Optimization: Utilizing the next/image component (indicated by data-nimg="1") is the standard for image optimization in Next.js. To enhance this further, one could ensure that the unoptimized={true} attribute is used only in exceptional cases and that precise width and height dimensions are always provided for images loaded from a CMS or database to prevent layout shifts. No-JavaScript Fallback ( ): The presence of a tag is an important step toward making content accessible to search crawlers and users with JavaScript disabled. While basic content is available, an ideal implementation would go beyond displaying a warning to providing full navigation and, where possible, form functionality through standard server actions. This would ensure not just "graceful degradation" but a complete experience for all users. Semantic Markup and Accessibility: The use of main, section, h1, h2, and aria-labelledby creates a solid semantic foundation. However, to achieve a gold standard, a thorough audit of all interactive elements is recommended to ensure they have comprehensive aria- attributes and roles, especially within custom components. For instance, perfect keyboard navigation and state announcements for screen readers are vital for elements like tabs and custom buttons. Semantic Markup and Accessibility main section h1 h2 aria-labelledby aria- Performance and Core Web Vitals: The project wisely uses preload for fonts and images, along with asynchronous script loading (async), which are excellent practices. The next step would be detailed profiling with tools like Google PageSpeed Insights for micro-optimizations in resource loading order. This would guarantee the best possible scores for Largest Contentful Paint (LCP) and Cumulative Layout Shift (CLS), particularly when dealing with dynamic content. Performance and Core Web Vitals preload async Image Optimization: Utilizing the next/image component (indicated by data-nimg="1") is the standard for image optimization in Next.js. To enhance this further, one could ensure that the unoptimized={true} attribute is used only in exceptional cases and that precise width and height dimensions are always provided for images loaded from a CMS or database to prevent layout shifts. Image Optimization next/image data-nimg="1" unoptimized={true} width height No-JavaScript Fallback ( ): The presence of a tag is an important step toward making content accessible to search crawlers and users with JavaScript disabled. While basic content is available, an ideal implementation would go beyond displaying a warning to providing full navigation and, where possible, form functionality through standard server actions. This would ensure not just "graceful degradation" but a complete experience for all users. No-JavaScript Fallback ( Frequently Asked Questions Frequently Asked Questions Here are answers to some of the most common questions about the core technical features of this starter architecture. Sitemap and Robots.txt Sitemap and Robots.txt How does the Sitemap generation work? How does the Sitemap generation work? The starter generates a dynamic sitemap.xml by using the app/sitemap.ts file convention in Next.js. This file exports a function that programmatically builds the sitemap, supporting static routes, dynamic routes fetched from a database or CMS, and internationalization (i18n) alternates. It's designed to handle up to 50,000 URLs per sitemap file with automatic pagination if needed. sitemap.xml app/sitemap.ts How do I control which bots can access my site? How do I control which bots can access my site? You can manage crawler access by editing the app/robots.ts file. This file allows you to create allow/disallow rules for different user agents. By default, major search engines and helpful AI bots (like GPTBot and PerplexityBot) are permitted, while sensitive paths such as /admin, /api, and /auth are disallowed. app/robots.ts /admin /api /auth Do I need to keep a robots.txt file and app/robots.tsin sync?No. With Next.js 15+, theapp/robots.ts file automatically generates the robots.txt file at build time. You only need to maintain one source of truth in your TypeScript file, and the framework handles the rest. Do I need to keep a robots.txt app/robots.ts app/robots.ts robots.txt Progressive Web App (PWA) Features Progressive Web App (PWA) Features What is a Web App Manifest and why is it important? What is a Web App Manifest and why is it important? A manifest.webmanifest file is a JSON file that tells the browser how to handle your PWA when it's installed on a user's device. It defines the app's name, icons, start URL, display mode (e.g., standalone to hide browser UI), and theme colors. Without a valid manifest, your application cannot be installed. manifest.webmanifest What is a maskable icon? What is a maskable icon? A maskable icon is a specially designed icon with safe zone padding. This allows different operating systems (like Android) to "cut" the icon into various shapes (circles, squares, squircles) without cropping important parts of your logo. Providing both standard and maskable icons ensures maximum compatibility across all devices. How do users uninstall the PWA? How do users uninstall the PWA? Users uninstall a PWA just like any other native application: by long-pressing the app icon and selecting "Remove" on mobile, or through the system settings on a desktop. The browser and operating system handle the entire uninstallation lifecycle automatically. Configuration and Optimization Configuration and Optimization What goes into the App Config?TheApp Config is a centralized file that manages branding, SEO defaults, PWA settings, and feature flags. It reads from your environment variables (e.g., NEXT_PUBLIC_APP_NAME, NEXT_PUBLIC_TWITTER_HANDLE) and provides type-safe access to these values throughout the application, preventing typos and inconsistencies. What goes into the App Config App Config NEXT_PUBLIC_APP_NAME NEXT_PUBLIC_TWITTER_HANDLE How are images automatically optimized? How are images automatically optimized? The next/image component is configured to automatically optimize images by resizing them for different device viewports (from mobile to 4K), converting them to modern, lightweight formats like WebP and AVIF, lazy-loading images that are off-screen, and generating blurred placeholders for a perception of instant loading. next/image What security headers does the Next.js config include? What security headers does the Next.js config include? The next.config.js file is set up to include critical security headers like Content Security Policy (CSP) to prevent cross-site scripting (XSS), HTTP Strict-Transport-Security (HSTS) to enforce HTTPS, X-Frame-Options to block clickjacking, and Referrer-Policy to protect user privacy. These have negligible performance impact but provide a massive security benefit. next.config.js What happens if a user has JavaScript disabled? What happens if a user has JavaScript disabled? The site degrades gracefully. Since the starter is built with server-side rendering (SSR) and semantic HTML, all core content is visible and readable without JavaScript. Navigation works via standard tags, though interactive features may be limited. This ensures accessibility and basic indexability even for crawlers that don't execute JS.