Most nofollow talk online is about links other sites give you. This guide flips the camera. You run the site. You choose when your own pages should add rel="nofollow" (or related values) on links that leave your domain.
That decision is different from checking what a directory wrote on your listing. If you need that inbound angle, read nofollow vs dofollow on directory listings. Here we stay on outbound policy: comments, ads, embeds, partner badges, and affiliate-style URLs you publish yourself.
For a plain definition of the attribute, keep what is nofollow open in another tab. For how listing links sit next to editorial and self-made types, see dofollow backlink types. Your job as owner is simpler: mark paid or untrusted exits clearly, and leave normal editorial recommendations alone.
What nofollow means when you are the publisher
When you link out without a restrictive rel, search engines may treat that link as a normal vote of confidence. That is the default. Adding nofollow tells crawlers not to treat the link as a full endorsement from you.
You still get the click for users. Referral traffic does not disappear. What changes is the signal you send about trust. That is useful when the destination is paid, user-submitted, or outside your editorial judgment.
Modern sites often combine values: nofollow with sponsored, or ugc on community content. Read every token you ship. If money changed hands, sponsored belongs in the mix. If a stranger typed the URL, ugc is the honest label.
Do not sprinkle nofollow on every external link "just in case". Over-tagging honest recommendations looks odd and gives you no practical gain. Save the attribute for cases where endorsement would be misleading.
Think in terms of liability for trust. A clean citation of MDN or a standards body is you standing behind a source. A random commenter's URL is not. Your HTML should reflect that difference without turning into a paranoia template.
UGC, comments, forums, and profile fields
If users can paste URLs into comments, bios, reviews, or support tickets that become public, you do not personally vouch for each destination. That is classic user-generated content.
- Comments and forums - default to rel="ugc" (often with nofollow). Spammers live here.
- Public profiles - same idea for website fields and social URLs strangers control.
- Guest uploads of link lists - treat them as UGC until an editor rewrites the page.
You can still promote a curated roundup where you personally pick every link. Those editorial picks stay clean. The rule is authorship: if you did not choose the URL, do not present it as your endorsement.
Moderate aggressively too. Nofollow is not a substitute for deleting malware, phishing, or keyword spam. It is a disclosure layer on top of basic site hygiene.
If you run a marketplace of listings, treat seller-provided URLs like UGC until your team verifies them. Scale does not turn a stranger's link into an editorial vote.
Ads, widgets, affiliate links, and paid placements
Money changes the story. Banner ads, sponsored blog mentions, paid newsletter plugs, and most affiliate product links should carry sponsored (and usually nofollow as well when your stack supports both).
Widget and badge programs are easy to forget. A "as seen on" badge farm, a comparison widget that injects merchant URLs, or an embed that drops outbound anchors into your footer still counts as a link you host. Audit third-party scripts the way you audit your own HTML.
Partner links sit in a gray zone. A free reciprocal badge with a random site you barely know is closer to advertising than to an editorial cite. A thoughtful recommendation inside a guide you wrote, with no payment, can stay a normal link. Write the policy down so your future self is consistent.
- Paid placement or commission path - use sponsored (plus nofollow if that is your standard).
- User-typed URL - use ugc.
- Your own researched recommendation - leave it dofollow unless the destination is clearly untrustworthy.
If a partner insists on a dofollow link as part of a paid deal, treat that as a red flag for your own risk, not a favor you owe them. Your outbound policy protects your site first.
When to leave outbound links alone
Clean citations help readers and usually help you. Link out to documentation, standards, open datasets, and primary sources without fear. That is how technical writing stays credible.
Same for genuine tools you use and would recommend in person. If you would paste the URL in a Slack message to a friend, you probably should not nofollow it in the article.
Internal links are never nofollow for SEO theater. Keep your own navigation and in-content paths normal. Outbound policy is about other domains, not about scaring crawlers away from your own pages.
Also separate "I disagree with this page" from "I paid for this click". Disagreement is editorial context in the paragraph. Payment is a rel attribute. Mixing those ideas creates messy HTML and confused readers.
A simple outbound policy you can ship this week
Write three bullets in your repo or CMS handbook:
- Editorial recommendations - normal links.
- Paid, affiliate, or ad inventory - sponsored (+ nofollow as needed).
- Anything a user can submit - ugc (+ nofollow as needed).
Then implement once at the template level. Comment systems, ad slots, and affiliate shortcodes should apply attributes automatically so you do not rely on memory during publish week.
Re-check after theme updates. Templates change; a footer partner row can flip from nofollow to clean without anyone noticing. Spot-check live HTML the same way you verify inbound directory attributes on listing pages.
Keep inbound and outbound mental models separate. Directories decide what they put on links to you. You decide what you put on links from you. Confusing those two jobs is how founders either over-nofollow everything or ship unpaid ads looking like editorial votes.
Ship the policy, automate the templates, and reserve exceptions for real edge cases. That is enough outbound hygiene for most indie and SME sites in 2026.
