<!doctype html>
<html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>QR Menü Oluştur - Restoranlar için Dijital QR Kod Menü | QRMenuLink.App</title>
    <meta name="description" content="Restoranınız için profesyonel QR kod menü oluşturun. Temassız dijital menüler, kolay güncelleme, çoklu dil desteği. 30 gün ücretsiz deneme ile başlayın." />
    <meta name="author" content="QRMenuLink.App" />

    <meta property="og:title" content="QR Menü Oluştur - Restoranlar için Dijital QR Kod Menü | QRMenuLink.App" />
    <meta property="og:description" content="Restoranınız için profesyonel QR kod menü oluşturun. Temassız dijital menüler, kolay güncelleme, çoklu dil desteği. 30 gün ücretsiz deneme ile başlayın." />
    <meta property="og:type" content="website" />
    <meta property="og:image" content="/og-image.png" />
    <meta property="og:site_name" content="QRMenuLink.App" />

    <meta name="twitter:card" content="summary_large_image" />
    <meta name="twitter:site" content="@QRMenuLinkApp" />
    <meta name="twitter:image" content="/og-image.png" />
    
    <!-- Content Security Policy (fallback) -->
    <!-- Not: CF Pages'de public/_headers önceliklidir, bu meta tag sadece lokal geliştirme için fallback olarak kullanılır -->
    <meta http-equiv="Content-Security-Policy" 
          content="default-src 'self'; 
                   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.paddle.com https://*.paddle.com https://www.googletagmanager.com https://*.googletagmanager.com https://static.cloudflareinsights.com; 
                   worker-src 'self' blob:; 
                   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.jsdelivr.net https://cdn.paddle.com https://sandbox-cdn.paddle.com https://*.paddle.com; 
                   font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.jsdelivr.net; 
                   img-src 'self' data: https: blob: http://thefoost.com http://*.thefoost.com https://thefoost.com https://*.thefoost.com https://www.thefoost.com https://*.storage.tigris.dev https://fly.storage.tigris.dev https://*.storage.dev https://t3.storage.dev https://*.t3.storage.dev https://media.qrmenulink.app; 
                   media-src 'self' data: blob: https: http://thefoost.com http://*.thefoost.com https://thefoost.com https://*.thefoost.com https://www.thefoost.com https://*.storage.tigris.dev https://fly.storage.tigris.dev https://*.storage.dev https://t3.storage.dev https://*.t3.storage.dev https://media.qrmenulink.app; 
                   connect-src 'self' data: ws: wss: ws://localhost ws://127.0.0.1 ws://localhost:3000 wss://localhost wss://127.0.0.1 https://www.thefoost.com https://thefoost.com https://*.thefoost.com https://*.supabase.co https://api.supabase.com https://*.storage.tigris.dev https://fly.storage.tigris.dev https://*.storage.dev https://t3.storage.dev https://*.t3.storage.dev https://media.qrmenulink.app https://billing.qrmenulink.app https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://fonts.gstatic.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.jsdelivr.net https://o4505075539902464.ingest.us.sentry.io https://*.sentry.io https://*.amazonaws.com https://api.geonames.org https://secure.geonames.org wss://*.supabase.co https://cdn.paddle.com https://sandbox-cdn.paddle.com https://*.paddle.com https://api.paddle.com https://sandbox-checkout-service.paddle.com https://sandbox-checkout-analytics.paddle.com https://checkout-service.paddle.com https://checkout-analytics.paddle.com https://cloudflareinsights.com; 
                   frame-src 'self' https://www.googletagmanager.com https://qrmenulink.app https://*.qrmenulink.app https://billing.qrmenulink.app https://www.google.com https://*.google.com https://maps.google.com https://*.google.com/maps https://buy.paddle.com https://sandbox-buy.paddle.com https://*.paddle.com;" />
    
    <!-- DNS Prefetch for external resources -->
    <link rel="dns-prefetch" href="https://fonts.googleapis.com" />
    <link rel="dns-prefetch" href="https://fonts.gstatic.com" />
    <!-- Lemon Squeezy dns-prefetch kaldırıldı -->
    <link rel="dns-prefetch" href="https://www.googletagmanager.com" />
    
    <!-- Rubik Font - preload URL must match stylesheet URL so the preload is used -->
    <link rel="preconnect" href="https://fonts.googleapis.com" />
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link rel="preload" href="https://fonts.googleapis.com/css2?family=Rubik:wght@300;400;500;600;700;800;900&display=swap" as="style" />
    <link href="https://fonts.googleapis.com/css2?family=Rubik:wght@300;400;500;600;700;800;900&display=swap" rel="stylesheet" />
    <!-- Playfair Display & Cormorant Garamond - Luxe tema için lazy load edilecek -->
    <!-- Material Icons - Vision UI için lazy load edilecek -->
    <!-- Paddle.js - Client-side checkout için -->
    <script src="https://cdn.paddle.com/paddle/v2/paddle.js"></script>
    <script type="module" crossorigin src="/assets/index-DZoFLGAz.js"></script>
    <link rel="stylesheet" crossorigin href="/assets/index-Er51jrLi.css">
  </head>

  <body>
    <div id="root"></div>
  </body>
</html>
