Author pages without external signals: when they start to pay off

Without external signals no project needs an author page — but every project needs an author identity. Threshold model, scenarios, German legal angle.

by ·

I get this question over and over: "My project has no backlinks, no mentions, no citations. Do I still need an author page?" The short answer is: no — but you need an author identity, and you need it right now. Those are two different things, and conflating them costs most projects either unnecessary work or a missed opportunity. This article separates them, hands you a four-step threshold model, and covers the German legal situation that English-language guides routinely omit.

If you are short on time: jump to the scenario matrix, find your row, follow the level. The rest is the reasoning.

Identity is not the same thing as a page

The entire debate suffers from one conflated term. Let us keep two things apart:

Author identity is a machine-readable, unambiguous identifier for the person behind the text: a Person node in your JSON-LD whose sameAs points at the external profiles you already have — GitHub, LinkedIn, Mastodon, whatever exists. It costs you twenty minutes of template work once, and nothing thereafter.

An author page is a dedicated URL with a photo, a biography, credentials and a body of work. It is an editorial artifact: it has to be written, maintained, translated, legally reviewed and — under data protection law — cleanly dismantled again.

The sentence everything comes down to:

An author page does not create reputation. It is the container reputation collects in. An empty container is no advantage — the only expensive mistake is putting it up too late.

This is not my private reading. Google's own documentation for Article markup describes author.url and then adds: "You can use the sameAs property as an alternative. Google can understand both sameAs and url when disambiguating authors." Google itself tells you that a dedicated author page is not required to identify an author unambiguously. A link to your GitHub profile does the job.

Why self-description is not a signal

Reputation is something others attribute to you. That is not an SEO rule, it is the definition of the word. When you write on your own site that you are an expert, you have made a claim — not supplied evidence. An author page without external signals is exactly that: a claim, elaborately formatted.

This is why the author page comes after reputation, not before it. It becomes useful the moment there is something to collect: a talk, a citation in a trade article, a mention you did not place yourself. Before that it only shows what you say about yourself — which already appears under your name on every article.

The sameAs link, by contrast, is not a claim but an edge in a graph. It connects the name under your article to a profile that exists elsewhere and was verified there. Mastodon, for instance, verifies via a rel="me" link on your own website plus the website entered in your Mastodon profile; the two-way match confirms ownership. That is cheaper than any author page and does more.

What Google actually says

This is where it pays to separate the evidence from the folklore.

sameAs is a documented alternative to author.url. See above. That is the central piece of evidence for "identity before page".

Author markup was never a ranking signal. Google Authorship — the rel=author mechanism with author photos in the search results — launched in June 2011 and was fully retired on 28 August 2014. John Mueller had already said in September 2013: "we don't use authorship for ranking." A ranking benefit was never confirmed; in 2011 it was mentioned only as a theoretical future possibility.

Structured data makes you eligible for presentation features; it does not lift your ranking. Google's documentation frames this as eligibility: you must include all required properties for an object to be "eligible for appearance in Google Search with enhanced display". Be careful with the sharper version of this claim — Google does not use the sentence "structured data is not a ranking factor" verbatim. What is documented is the eligibility logic, not a denial.

Author biographies are a quality question, not a technical one. Mueller, asked whether author bios influence rankings: "less something I would focus on this as a technical thing … but rather more as a quality thing, as a user experience thing where you can actually do user tests with your users directly."

ProfilePage helps less than its name promises. Google's documentation does list "an author page on a news site" and "an 'About Me' page on a blog site" as valid use cases — but the documented benefit is tied to the community feature: the markup helps Google understand "the creators that post in an online community" and feeds the Discussions and Forums feature. Not a word about a ranking benefit or a knowledge panel. Incidentally, schema.org itself links ProfilePage to the person via mainEntity, not via author, and nowhere recommends the type specifically for author pages.

A knowledge panel cannot be conjured up with markup. Panels are generated automatically from sources across the web. Claiming is not creating: a panel must already exist before you can claim it. Anyone building an author page to trigger a knowledge panel has misunderstood the mechanism.

What AI systems actually do

A lot gets asserted here and little gets proven. What can be said:

AI systems do ingest JSON-LD content. Mark Williams-Cook tested it: the address of an invented company appeared exclusively in deliberately invalid JSON-LD, never in the visible text. ChatGPT and Perplexity found it and repeated it. The popular thesis "AI systems don't even see your JSON-LD" is therefore dead. The tester himself concludes from this that the models read the markup more like running text than parsing it the way a search engine would — that is his interpretation of the finding, not a second measurement.

Whether they evaluate the graph is open. Whether a system dereferences @id, connects nodes and reconciles sameAs is documented for almost none of them. John Mueller, asked whether schema helps LLMs understand entities: "short answer is yes, no, and it depends" — explicitly flagged as his personal view, "this is not official guidance."

Microsoft has been the most explicit. At SMX Munich in March 2025, Fabrice Canel of Microsoft's Bing confirmed that schema markup helps Microsoft's LLMs understand content. The wording comes from David Mihm's report and was confirmed by Canel afterwards in the comments; it is not a direct quote. For Google Gemini, OpenAI and Perplexity, the same source says the situation is simply unclear.

There is a counterweight, too. An analysis by Search Atlas published in December 2025 found no correlation between schema coverage and AI citation rates across OpenAI, Gemini and Perplexity: sites with comprehensive schema did not consistently outperform those with minimal or no markup. The study says of itself that it measures correlation, not causation.

And llms.txt? Mueller called the file "purely speculative for now". The numbers come from two separate studies: Ahrefs found in May 2026, across more than 137,000 domains, that 97 % of llms.txt files receive zero AI requests; Originality.ai counted a rise from 4,088 to 36,120 files between June 2025 and May 2026. "Rarely fetched" is not the same as "read by nobody" — coding agents demonstrably use them.

The conclusion from the uncertainty: redundancy beats normalization. If you do not know whether a consumer resolves your graph, give it the information in full where it reads — instead of storing it centrally once and pointing at it from everywhere. Which leads straight into the next section.

The technical core: the Person node belongs on every page

The elegant pattern would be this: define the Person node centrally once, say on /about/, and reference it from every article by @id alone. By the specification that is perfectly correct. The W3C describes a "node reference" — an object containing only @id — as a first-class construct of JSON-LD 1.1, and an @id does not even have to be dereferenceable: "While it is a good practice for resource identifiers to be dereferenceable, sometimes this is not practical."

In practice the pattern is still a bad idea, for a reason that has to be attributed carefully:

What is documented: Google requires the markup to live on the page. The structured data guidelines say: "Put the structured data on the page that it describes, unless specified otherwise by the documentation" and "Your structured data must be a true representation of the page content."

What practitioners report: Yoast and Sitebulb consistently describe that Google resolves @id references only within the same page and does not merge identical @id values across pages — Sitebulb puts it this way: Google understands node identifiers within the same page, "but they don't yet offer cross-page support". Yoast therefore emits all relevant schema pieces of a page into one @graph and references only page-internally.

What I am not claiming: that Google ever said so itself. I could not find a Google primary source for the statement "cross-page @id references are not resolved". It is a well-supported practitioner observation, not a Google denial.

The practical consequence is the same under either reading: the complete Person node belongs inline in the @graph of every article page, with author referencing it page-internally by @id. This is not an AI argument — it already holds for Google, and it costs you a few hundred bytes per page.

I made exactly this mistake myself. On this site the article template emitted an anonymous person clone for a long time:

"author": { "@type": "Person", "name": "Jean Pierre Kolb" }

The rich node with its seven sameAs profiles lived only on the two homepages. Nothing connected the two ends — a name without an identity on roughly 470 article pages, an identity without articles on two homepages. Fixed, it looks like this:

{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "TechArticle",
      "headline": "…",
      "author": { "@id": "https://www.jpkc.com/#person" }
    },
    {
      "@type": "Person",
      "@id": "https://www.jpkc.com/#person",
      "name": "Jean Pierre Kolb",
      "url": "https://www.jpkc.com/",
      "sameAs": [
        "https://github.com/JPKCom",
        "https://mastodon.social/@JPKCom",
        "https://de.linkedin.com/in/jpkcom"
      ]
    }
  ]
}

Two details that are easy to miss. First, the @id points at the domain root, not at /db/#person: a person is not bound to a subdirectory, and there should be one identity across all projects on a domain. Second, the @id is an identifier, not a link. It must therefore not be derived from the build URL — otherwise the person is called http://localhost:8080/…#person in a dev build and something else in production. On my site it lives as a fixed value in the site metadata.

And for all of this you need no author page. The url may point at your homepage, and sameAs at profiles that already exist.

The threshold model

Four levels. The trigger for moving to level 1 is always the same: the first external signal you did not place yourself.

Level Trigger Recommendation
0 No external signals No page. Identity only: a Person node with sameAs, inline on every article page. If you have no external profile at all, create one — it costs nothing and turns a claim into a graph edge.
1 First external signal (mention, citation, talk) Build the author page. Now it has something to show that is not self-description.
2 A body of external signals The page becomes a hub: cited in, spoke at, contributed to. Reputation management in the proper sense.
3 Multiple authors or advice-critical content A full author system: disambiguation, editorial policy, a documented review process.

Add one cross-cutting criterion that can pull the level forward. Ask yourself:

Does knowing who makes this statement change whether I act on it?

For a tar cheat sheet, hardly at all — the command works or it does not, regardless of who wrote it down. For a security, legal or medical recommendation, enormously. The more strongly this criterion applies, the earlier the page pays off, even without external signals.

Scenarios: find your row

Situation Level In one sentence
Brand-new project, zero signals 0 Identity immediately, page never prematurely.
Established site with traffic, no author markup 0–1 Retrofit — and fix the canonical person URI once.
Mature site with external signals 2 The page exists already; your job is to collect the signals.
Solo consultant, freelancer 0–1 The most common case. Identity yes, page not yet.
Company blog without a personal brand 0 Organization instead of Person. Author page often superfluous.
Multi-author newsroom, agency 3 Disambiguation becomes functional, not cosmetic.
Open-source maintainer 1 Commits, releases and issues are external signals. Usually overlooked.
Academia 1–3 ORCID as an identity anchor for humans and scholarly databases.
E-commerce without authors 0 But mind the bolted-on blog — see the legal section.
YMYL: medicine, law, finance 1–3 The cross-cutting criterion applies maximally. The level jumps forward.

Four rows deserve elaboration, because they are not self-explanatory.

The retrofit is a URL problem, not a content problem. When you retrofit an established site, the real decision is not what goes in the bio but which URI permanently identifies the person. Fix it once and never change it. An @id migration is expensive because you do not control who stored the old identifier where.

Open-source maintainers are almost always already at level 1. Commits, releases, issues and pull requests in other people's repositories are external, verifiable signals placed by other humans. Anyone maintaining a package with meaningful usage has had a container to fill for a long time — and often does not notice.

For a company blog, Organization is usually the more honest markup. If the texts are written interchangeably by three people in marketing, an author page per person is a label without substance. It cuts the other way too: an entity bound to a single individual becomes a problem when the company is sold. Organization as the publisher cleanly separates the person who writes from the house that publishes.

With ORCID, take care. ORCID is an excellent identity anchor for humans, scholarly databases and publishers. That search engines evaluate ORCID, GND or VIAF as authority identifiers is something I have found no evidence for — Google positions the identifier property, per the ProfilePage documentation, as a page-internal ID. Put ORCID in sameAs, but expect no search-engine effect from it.

One more special case: AI-generated content and ghostwriting. Who is the author when a model wrote the draft and a human reviewed it? My answer is in Adversarial fact-checking for AI texts and on my AI transparency page: the author is whoever takes responsibility for the content. The author page is where you explain that — another argument for building it only once you have something to explain.

This section is missing from virtually every English-language guide, and it is the reason the question has a different answer in Germany than in the United States.

This is not legal advice. I am an IT consultant, not a lawyer. What follows is my reading of the statutes with sources; when in doubt, ask someone admitted to the bar.

§ 5 DDG (the "Impressum" duty) applies only to "geschäftsmäßige, in der Regel gegen Entgelt angebotene digitale Dienste" — commercial digital services normally offered for payment. It requires "der Name und die Anschrift, unter der sie niedergelassen sind" (the name and the address of establishment). That a P.O. box is insufficient and a summons-capable address is required is settled interpretation — the word "ladungsfähig" does not appear in the statute itself.

§ 18 (1) MStV goes further: it requires all telemedia "die nicht ausschließlich persönlichen oder familiären Zwecken dienen" (not serving exclusively personal or family purposes) to keep name and address "leicht erkennbar, unmittelbar erreichbar und ständig verfügbar" — easily recognizable, directly accessible and permanently available. This catches the non-commercial specialist blog that falls outside § 5 DDG.

§ 18 (2) MStV is the real find. Providers of "journalistisch-redaktionell gestalteten Angeboten" (journalistically and editorially designed offerings) must name, in addition to the details required by §§ 5 and 6 DDG, "einen Verantwortlichen mit Angabe des Namens und der Anschrift" — a responsible person with name and address. The duties are cumulative, not substitutive. And then comes the sentence this is all about:

Werden mehrere Verantwortliche benannt, ist kenntlich zu machen, für welchen Teil des Dienstes der jeweils Benannte verantwortlich ist.

("Where several responsible persons are named, it must be made clear which part of the service each named person is responsible for.")

The statute knows scope-bound responsibility. It demands that you make visible who stands behind which part of an offering. That is, in pure form, the legal ancestor of the author page — decades before anyone wrote Person schema. Whoever has multiple authors and falls under subsection 2 builds that attribution not for Google, but because the Medienstaatsvertrag requires it.

When is something "journalistically and editorially designed"? It is not defined by statute and not conclusively settled. The expert opinion of the German Bundestag's research service (WD 10-035/22) names as criteria a planned activity aimed at editorial processing and intended to influence public opinion formation. For blogs, the classic publicistic criteria are applied: publicistic orientation, frequent updating, longer duration, a high number of entries. Two guardrails from case law: the OLG Bremen held on 14 January 2011 (case no. 2 U 115/10) that even a law firm's website can be journalistically and editorially designed if it goes beyond mere self-promotion and carries regularly edited news. The OVG Berlin-Brandenburg held on 13 August 2014 that commercial communication is in principle not journalistic-editorial, because it is oriented toward economic rather than societal relevance criteria.

For a shop operator this means concretely: product pages, an about page and customer reviews do not trigger subsection 2. A bolted-on, regularly updated blog that goes beyond product marketing into societal topics very much can.

Fines. Breaches of the information duties under § 18 MStV can be punished under § 115 MStV with a fine of up to 50,000 euros. (The 500,000 euros also mentioned in the MStV apply to other offences, not to § 18.)

Pseudonyms. § 5 DDG requires natural persons to give their full first and last name. The LG Oldenburg held on 10 April 2020 (case no. 5 O 489/20) that using only a registered stage name instead of one's civil name violates the Impressum duty. Whether a registered stage name can ever suffice remains contested in the literature. If you want to publish pseudonymously, settle that legally before you build an author page — not after.

The GDPR flip side: an author page is hard to unwind. An author photo is processing of personal data and needs a legal basis, in practice consent. Consent is revocable at any time under Art. 7 (3) GDPR, and withdrawal must be as easy as granting it; when someone leaves, erasure duties under Art. 17 GDPR come into play. How far a once-granted consent carries beyond departure is disputed: the LAG Baden-Württemberg held in 2023 (case no. 3 Sa 33/22) that, absent an express agreement to the contrary, it does not continue — whereas the Bundesarbeitsgericht had held in 2015 (case no. 8 AZR 1011/13) that a written consent does not automatically lapse with the employment relationship. So do not rely on a simple answer.

For level 3, an operating rule follows: anyone creating author pages for employees needs a documented process, from day one, for the day someone leaves.

Anti-patterns: what actually happened

Two cases are cited constantly in SEO circles as evidence of algorithmic penalties. Both are real — and both prove something other than what is claimed.

Sports Illustrated, 2023. The magazine published articles under invented author personas such as "Drew Ortiz" and "Sora Tanaka", whose profile photos had been bought on a marketplace for AI-generated portraits. After Futurism's investigation all AI authors were removed; The Arena Group pushed responsibility onto its contractor AdVon Commerce.

CNET, 2023. From November 2022 onward, more than 70 finance articles appeared under the "CNET Money Staff" byline, over half of them containing errors, some plagiarized. Wikipedia consequently downgraded CNET from "generally reliable" to "generally unreliable" for the affected period. Red Ventures had bought CNET in 2020 for 500 million US dollars; the later sale was complicated by the scandal.

And now the part almost everyone leaves out: for neither case is there any evidence of a Google penalty. No documented manual action, no quantified ranking or traffic loss. The consequences were editorial and reputational — a reliability downgrade at Wikipedia, a damaged sale process, burned brands. Anyone telling these stories as an SEO penalty is telling them wrong.

That is not reassurance but precision: the damage was real, but it did not come from the algorithm. It came from people who stopped believing the source. That is the damage an invented or inflated author page does — and it cannot be fixed with a recovery strategy.

What about thin but honest author pages? The relevant Google policy is "scaled content abuse": "Scaled content abuse is when many pages are generated for the primary purpose of manipulating search rankings and not helping users." It targets mass generation for ranking manipulation, regardless of whether human or machine produced it. Whether a hand-written, thin author page falls under it is therefore not established — the scale-and-manipulation threshold is missing. To that extent the damage remains hypothetical, which is no reason to put up an empty container, but no reason to panic either.

What I am not claiming

Fact-checking means making the limits of your own knowledge visible. These eight things get said about this topic, and I explicitly do not say them:

  1. Not: "AI systems don't read JSON-LD." Empirically refuted.
  2. Not: "LLMs process schema only as running text." That is one tester's interpretation, not a measurement — and Microsoft says the opposite for its LLMs.
  3. Not: "Wikidata excludes self-published material." The notability policy simply does not say that.
  4. Not: "Sports Illustrated and CNET were penalized by Google." No evidence.
  5. Not: "§ 18 MStV requires 'regular news or political information'." That wording is not in the statute.
  6. Not: "Thin author pages lead to a penalty." The harm is hypothetical.
  7. Not: "ORCID, GND or VIAF are evaluated by search engines as authority identifiers." Unsupported.
  8. Not: "E-E-A-T is a ranking factor." It is not — and neither is author markup.

And one thing I say only with attribution: that Google does not resolve @id across pages is reported by Yoast and Sitebulb. I know of no Google primary source for it. The recommendation to emit the Person node inline does not depend on it — it is right under either reading.

How I arrive at these distinctions is described in Adversarial fact-checking for AI texts: every checkable claim is tested with the goal of refuting it. Three of these eight points were my own working theses before the research.

FAQ

No. Without external signals an author page has nothing to show except what you say about yourself — and that already appears under every article. What you do need immediately is an author identity: a Person node with sameAs links to your existing profiles, inline on every article page. Google explicitly names sameAs in its Article documentation as an alternative to a dedicated author URL.

When does an author page start to pay off?

From the first external signal you did not place yourself: a mention, a citation, a talk, a contribution to someone else's repository. From then on the page has content that goes beyond self-description. Before that you are building an empty container. Exception: for advice-critical topics — medicine, law, finance, security — it pays off earlier, because there the question "who says this?" changes the answer.

Does an author page help my ranking?

No, at least not as a direct factor. Google Authorship ran from 2011 to 2014 and was never confirmed as a ranking signal; John Mueller said in 2013, "we don't use authorship for ranking." Structured data makes you eligible for presentation features; it does not lift your ranking. The benefit of an author page is attributability and trust, not position.

Do AI systems read my Person schema?

They ingest the content — that has been tested: ChatGPT and Perplexity reproduced an address that existed only inside invalid JSON-LD. Whether they evaluate the graph, that is, resolve @id and reconcile sameAs, is undocumented for most systems. Microsoft has confirmed that schema helps its LLMs; for Google Gemini, OpenAI and Perplexity there is no comparable statement. Under that uncertainty, redundancy is the robust strategy.

Where does the Person node belong?

In full, in the @graph of every article page, referenced by a page-internal @id. Not: defined centrally once on an about page and pointed at from everywhere. Google requires structured data to sit on the page it describes, and according to reports from Yoast and Sitebulb, cross-page @id references are not merged.

As a blogger, must I name a responsible person?

Possibly. § 18 (1) MStV requires name and address from all telemedia that do not serve exclusively personal or family purposes. If your offering is additionally "journalistically and editorially designed" — indicators are publicistic orientation, frequent updating, longer duration, many entries — then § 18 (2) MStV additionally requires a named responsible person. Where several are named, it must be clear who is responsible for which part. This is not legal advice; the boundary is not conclusively settled.

Further reading

The framing for the authority side of this topic is in E-E-A-T & Brand Authority. The technical markup layer overall — JSON-LD, llms.txt, the Markdown mirror — is covered in Structured Data and Technical GEO. How Google itself frames AI visibility is explained in Google's AI optimization guide. And the method behind the eight "I do not claim this" points is described in Adversarial fact-checking for AI texts.