OUR BOT
Questions about Shopsteddy traffic?
If you're seeing Shopsteddy in your logs, want to check a request, or think the bot is behaving in a way it shouldn't, send us the details and we'll look into it.
General bot questions
Questions about what Shopsteddy checks, robots.txt, scan behaviour or how to identify our traffic.
bot@shopsteddy.comSecurity or unexpected traffic
Traffic claiming to be Shopsteddy that doesn't match this documentation, suspected abuse, or anything that looks like a security problem.
security@shopsteddy.comWhat to send us
- The
Shopsteddy-Scan-Idfrom the request, if your logs captured it. - The site and path you saw the request on.
- The approximate date and time, including timezone if you have it.
- The User-Agent.
- The source IP as you saw it.
- A Cloudflare Ray ID or other request ID, if available.
- The HTTP status or security event you saw.
If you believe a Shopsteddy scan was requested without your permission, say that clearly. We can use the scan ID and timing information to trace the run, review how it was authorised and take action where needed.
Leave out passwords, private API keys, Shopify Admin API access tokens, session cookies, payment information and other sensitive customer data.
If you want Shopsteddy traffic stopped
You can use robots.txt to block ordinary Shopsteddy crawling, or contact us with the scan ID if you think the traffic should not have been running at all. We can investigate the run and the account or process that started it.
For entries already stored in your own logs, Shopsteddy cannot delete them remotely. Use your logging platform's normal filtering or retention controls, subject to your own security and audit requirements.