Storefront audit bot

What CommerceTrace requests from a store.

CommerceTrace-Audit is a read-only browser used only after a person states that they manage the store or have permission to test it. It visits the public storefront, opens one public product, adds it to the cart, and starts checkout far enough to observe view_item, add_to_cart, and begin_checkout analytics events.

What it never does

• It does not place an order or make a payment.
• It does not sign in to Shopify Admin or use customer data.
• It does not change themes, tags, products, settings, or analytics.
• It does not bypass a storefront password.

Traffic limits

Requests are limited per person, per target store, and across the service. The browser identifies itself as CommerceTrace-Audit/1.0 on its discovery requests. Short-lived audit progress is discarded automatically.

Block the bot with robots.txt

Add this group to the store's robots.txt policy:

User-agent: CommerceTrace-Audit
Disallow: /

The policy is checked before the browser audit begins.

Permanent opt-out

Email contact@commercetrace.com with the store domain and the subject “Storefront audit opt-out”. We record only the domain and the active opt-out state. Once recorded, future public audit requests for that domain are refused across restarts and deployments.

Questions or abuse reports

Send the store domain and approximate time to contact@commercetrace.com. Do not send customer information, passwords, or access tokens.