1The challengeThe client is a law firm handling compensation claims for deaths caused by medical error: whoever is searching has just lost a family member and wants to know three things — whether they are entitled to anything, within what deadline, and with what evidence. The site had been live since 2 September, but nobody was reading it. The Search Console baseline on 16 September said it all: zero clicks, 54 impressions, average position 35.3, two pages indexed out of seven. Three pages — the blog, the first guide and the privacy policy — were not ranking badly: they had never been crawled at all, and URL Inspection answered "URL is unknown to Google". On top of that came a constraint you cannot work around: the form collects data about the health of a deceased person, a special category under art. 9 GDPR, with everything that implies for consent, recipients and third-party tools.
1/3
2The solutionThe site was built from scratch in Astro: static output and a single server route for the form. The hero is a sequence of 48 scroll-driven frames painted on a canvas — not a video, because on iOS scrubbing goes through the decoder and does not guarantee the exact frame; on mobile it falls back to a static poster: 300 KB for an effect invisible behind the copy cannot be justified. The form runs in four steps, with the compliance constraints as its structure: two separate, non-pre-ticked checkboxes, privacy notice and explicit consent under art. 9.2.a, no clinical data in the query string, and submission to our own endpoint, not a third-party service. Then the part you could not see by opening the pages: the declared canonical origin was the bare domain, whose A record points at an empty folder returning 403, while the host actually being served is the one with www. Every page declared as its own good version an address that was walled off. With the origin moved to www.risarcimentodecessomedico.it, canonicals, og:url, the JSON-LD @ids, the sitemap, the RSS feed and llms.txt all follow.
2/3
3The resultsFixing the canonical origin is the most important intervention and the least visible: before, an engine following the declared version hit a wall; now it finds the page. You could not spot it by opening the site, because the site worked. For everything else we chose to measure rather than promise: an indexing log is open, with the 16 September baseline frozen, one line per intervention and the dates on which we go back and look. In the meantime a second guide went live on a different query cluster, and the guides have their first real internal links: before, they got exactly one, from the footer. Consent comes first and has been verified: no request to Google before the visitor accepts, and the case category is never sent to Google because it is health data. The functional suite on a real browser passes 25 assertions out of 25. One honest caveat: on a domain a few weeks old with no backlinks, rankings are a matter of months. What is delivered today is a technically correct site, lawful tracking, and a log that will say whether each move worked.
3/3
