Combo Camps offers kids day camps in Whistler. The site is reachable, served over HTTPS, has a published sitemap, and links Facebook and Instagram from the footer. A phone number, an email address, and a Whistler postal address are all visible in the rendered HTML.
The remaining issues stem from Squarespace platform limitations rather than from any lack of SEO effort. Squarespace ships robots.txt with every major AI crawler blocked by default. Squarespace's password-gate widget injects <h1>Enter Password</h1> into the static HTML of every page across the site, including the homepage and the About page — a platform behaviour that cannot be overridden through normal page settings. The LocalBusiness JSON-LD Squarespace emits is a near-empty stub with no name, address, phone or geo. Lighthouse mobile measured Largest Contentful Paint at 13.3 seconds, driven primarily by Squarespace's render-blocking platform CSS bundle, which is not configurable from inside the editor.
A focused two-week effort across Sprint 1 and Sprint 2 lifts the score from 31 to approximately 62 — the realistic ceiling within Squarespace's platform constraints. Reaching 75+ requires the planned migration to a file-based site with a custom backend, which removes the platform-bound LCP, schema, H1-injection and AI-crawler limits in one move, combined with the content, schema and authority work in Sprints 3 and 4.
The /testimonials page contains eight named, attributed parent reviews with specific outcomes ("my son came home covered in mud and grinning") — strong first-hand experience signal. The same content carries no Review schema, so the signal is wasted on machine readers. There are no parent guides, no day-in-the-life narratives, and no first-person staff content.
Bio pages exist for four staff (Jamie, Olly, Jane, Chloe), but their content is shallow and they are not linked from any program page. Coaching credentials, first-aid certifications, and child-safety qualifications — the things parents check before booking — are not declared. Google's September 2025 Quality Rater Guidelines now require demonstrated expertise to be attached to identifiable individuals on commercial pages. They are not.
No press citations. No Tourism Whistler directory entry. No accreditation badges (BC Camping Association, the Canadian Camping Association). No Wikidata entity. The /parents-hub/certifications page implies certifications exist; they are not surfaced as named bodies with verifiable links. Facebook and Instagram are linked in the footer but not declared in the schema sameAs property.
A privacy policy and cancellation policy are published. The cookie policy exists. NAP is internally consistent where it appears. The trust collapse is the WINTER 2022/2023 H1 still rendering on the live winter pricing page in May 2026, the /covid19 page still being indexed, and the Squarespace template names ("General 1", "Reviews 1", "Gallery 3") leaking into <title> tags on five pages.
The website is reachable and indexable. HTTPS is active. The Squarespace CDN is healthy with 24-hour cache age. A sitemap is published at /sitemap.xml with 61 URLs. The site ranks for the brand name "Combo Camps" in Google. The CampBrain registration system is integrated. Facebook and Instagram profiles exist and are linked from the footer.
Three changes in how parents find local activity providers since this site was last meaningfully reviewed affect the recommended work below.
First, Google leads almost every "[activity] camp [city]" query with a Map Pack. The Google Business Profile, not the website, is the primary surface a parent first sees. Second, AI assistants (Google AI Overviews, ChatGPT, Perplexity) now answer queries like "best summer camps in Whistler for 7 year olds" inline, and they require structured data (LocalBusiness, Event, AggregateRating, FAQPage) before they will reliably name a specific provider. Third, parents shortlist from a phone in 30 seconds: ages, dates, price, and a "book now" link have to be visible above the fold or the page is rejected.
The recommended work falls into two tracks:
• AI Search Readiness: unblock the AI crawlers that Squarespace blocks by default; deploy the LocalBusiness, Event, FAQPage, and Review schema currently absent or empty; publish an llms.txt; populate sameAs with the existing social profiles.
• Google Search Improvements: remove the password-gate widget that injects "Enter Password" as the first H1 on every page; write 18 missing meta descriptions; refresh the WINTER 2022/2023 page; fix the broken /springprogram nav link; rationalise titles to include Whistler.
The two tracks share most of their underlying work. Schema contributes to both Google rich results and AI citation. Removing the password-widget H1 leak fixes the on-page H1 problem and the schema-rendering problem in one change. Unblocking AI crawlers is one toggle in the Squarespace robots.txt editor.
<h1>Enter Password</h1> directly into the static HTML of all 18 pages crawled, including the homepage, the About page, every program page, and every pricing page. JavaScript hides the visual overlay on most pages but the H1 stays in the DOM. Googlebot reads it as the first H1 on every page. The visual content underneath is hidden from crawlers entirely on About, Gallery, and Parents Hub.robots.txt applies a Disallow: / rule to every major AI crawler: GPTBot, ClaudeBot, anthropic-ai, OAI-SearchBot, PerplexityBot, Google-Extended, Applebot-Extended, CCBot, plus 20 others. The site is invisible to AI search by default./config, /api/, /static/, ?author=, ?format=json, etc.) — those are valid.
<meta name="description" content=""/>. Empty./winterpricesdates reads WINTER 2022/2023. The audit was run in May 2026 — the dates on this commercial pricing page are four years out of date./winter* URLs.
image field and "openingHours": "" (a literal empty string). Name, address, telephone, geo, priceRange, and sameAs are all absent.info@combocamps.com; Facebook and Instagram profiles in the footer). None of it is exposed to crawlers in machine-readable form. For a Whistler-area business attempting to surface in the Map Pack and AI Overviews, this is the single largest gap identified.
["LocalBusiness","SportsActivityLocation","Organization"] entity with name, address (PostalAddress), geo (50.115, -122.954), telephone, email, openingHoursSpecification, priceRange, sameAs (Facebook + Instagram), founder (Jamie Grant). The full ready-to-paste block is in agent-schema.md. Verify with Google's Rich Results Test.
site.css blocks for 3,207 ms (111 KB)@font-face with font-display: swap in code injection; remove the fonts.googleapis.com link. Saves ~834 ms.window.addEventListener('load', ...). Saves 34 KB from the critical path.width/height attributes./springprogram. The actual page lives at /kiddycombo/springprogram. The advertised path returns HTTP 404 with no redirect./springprogram to /kiddycombo/springprogram. If the spring program is not currently running, hide the nav item entirely. Add a 301 redirect from /springprogram to the canonical path so any external links to the legacy URL also work.
strict-transport-security: max-age=0. This is technically a header, but with a max-age of zero it instructs browsers to forget any previous HSTS commitment immediately. The site has effectively no HSTS protection.curl -sSI https://www.combocamps.com/ | grep -i strict — the response should carry a positive max-age value.
http://static1.squarespace.com/.... Facebook, LinkedIn, and Apple Messages block insecure image URLs from HTTPS pages. The result is a broken or missing preview when anyone shares a Combo Camps page on social.https:// automatically. Set twitter:card to summary_large_image in code injection so the photo renders at full width on X/Twitter.
/leadership: "General 1 — Combo Camps"/kiddysummer: "General 1 — Combo Camps"/testimonials: "Reviews 1 — Combo Camps"/gallery: "Gallery 3 — Combo Camps"/apply: "Combo Camps — Combo Camps" (brand name twice)/find-us/ or /location/ page with the venue address, an embedded Google Map, parking and drop-off instructions, the route from Whistler Village, and a "what to expect on the first morning" section.
agent-schema.md: FAQPage from the seven /faqs Q&As, AggregateRating + four Reviews from the testimonials page, Summer 2026 Event with two Offer tiers, Fall 2025 Event, BreadcrumbList template for inner pages, Person schema for Jamie Grant.
/llms.txt returns 404. There is no curated entity summary for AI systems. Combined with the missing LocalBusiness schema fields and empty sameAs, AI engines have no canonical entity record to ground claims against. Wikidata also has no entry for "Combo Camps" — a low-cost, high-leverage AI grounding signal that does not require Wikipedia notability./llms.txt at the site root. Markdown sections: Entity summary · Programs · Location (Whistler) · Pricing · Booking · Contact. A draft is in agent-geo.md.sameAs property points to a Google Business Profile. No AggregateRating widget surfaces real review data. The site provides no on-page evidence that a GBP listing exists at all.sameAs array in the LocalBusiness schema./ is absent; /home is in its place — backwards./covid19 and /parents-hub/covid19policy last updated 2022 are still in the sitemap in 2026.lastmod dates from 2021. The last bios update was 2024-06-07./applicationcomplete (a thank-you confirmation page) is indexed and in the sitemap./managerapply, /programmanager) appear in the sitemap when they should be noindex./faq (linked from the footer) and /faqs (in the sitemap) are split — they need a 301 to one canonical.priority and changefreq are populated on every entry. Google has ignored both since 2023.
/ not /home. Delete /covid19 and /parents-hub/covid19policy with 301 redirects to /parents-hub. Set /applicationcomplete, /managerapply, /programmanager to noindex in Page Settings. Pick one canonical for /faq vs /faqs and 301 the other. Refresh lastmod across the rest of the site by republishing edited pages.
Combo Camps is a real, operating Whistler day-camp business with a Squarespace site that ships in a non-SEO-optimised state by default. The fundamentals — HTTPS, sitemap, sub-second TTFB, an existing brand and social presence, a real address and phone — are intact. What is missing is the layer of structured data, current content, named individuals, accurate H1s, and AI-crawler access that Google and AI engines now use to identify and rank a local service business.
Sprint 1 lifts the score by 19 points and clears the most damaging signals from the live site. Sprint 2 deploys the schema and AI surfacing that drive the largest visibility gains. By the end of Sprint 3 the site is in genuine shape to compete for parent intent in the Whistler tourist market. The single highest-ROI fix in the audit, by impact-per-hour, is removing the password-gate widget that injects "Enter Password" as the first H1 on every page.