diff --git a/make_post_sell/templates/join-or-log-in.j2 b/make_post_sell/templates/join-or-log-in.j2
index ca7e20e..ab57f06 100644
--- a/make_post_sell/templates/join-or-log-in.j2
+++ b/make_post_sell/templates/join-or-log-in.j2
@@ -1,4 +1,16 @@
 {% extends "base.j2" -%}
+{%- block append_to_head_tag_section %}
+  <title>Log in or join</title>
+  {# Auth gateway — every ?next=... permutation serves identical content,
+     which Google Search Console flagged as "Duplicate without
+     user-selected canonical". noindex,nofollow keeps the auth page out
+     of the index entirely (it has no business being indexed); the
+     no-referrer policy stops the URL — which can contain private
+     cart/product paths in ?next= — from leaking via Referer when the
+     user clicks any outbound link. #}
+  <meta name="robots" content="noindex,nofollow" />
+  <meta name="referrer" content="no-referrer" />
+{%- endblock append_to_head_tag_section %}
 {% block content -%}
 <section class="one-column">
   <section class="login-card elevation-3 animate-fade-in-up">
diff --git a/make_post_sell/views/misc.py b/make_post_sell/views/misc.py
index 942dfbd..b0299a3 100644
--- a/make_post_sell/views/misc.py
+++ b/make_post_sell/views/misc.py
@@ -16,7 +16,7 @@ from make_post_sell.lib.render import markdown_to_html
 
 DEFAULT_ROBOTS_DOT_TXT = """
 User-agent: *
-Disallow:
+Disallow: /join-or-log-in
 """