Kit 06 · Templates

Shopify Store Bot Traffic Filter Kit

Find out how much of your store's traffic isn't human — then stop paying for it.

Automated traffic passed half of all web traffic, and retail is crawled harder than any other category. That means your conversion rate is being divided by sessions that were never going to buy, and your ad platform is quietly learning to find more of them. This tells you your number, names the sources worth investigating, and shows you what to do about it. Nothing installs, nothing uploads, and it works with your internet off.

What you can produce with it

Your own bot percentage, calculated from a traffic export you already have
The sources worth investigating, each with the reason it was flagged
An estimate of what the flagged traffic is costing you, from your own ad budget
A robots.txt that blocks training-only crawlers while keeping the ones that send buyers
GA4 filters that stop referral spam polluting the numbers you report on
A ten-minute monthly routine so the number stays honest

What is inside

8 What you get

01

tools/Bot-Audit.html

The audit tool. Paste a GA4 or Shopify traffic export and it returns your bot percentage, the sources worth investigating with the reason each was flagged, an estimated wasted ad spend from your own budget figure, and a prioritised action list. One self-contained file with no network calls — it runs with your internet switched off.
02

guides/01-start-here.md

The 45-minute setup. Five steps, in order, with nothing optional buried in the middle.
03

guides/02-ga4-filters.md

Referral spam, internal traffic, developer traffic, and how to keep a clean comparison view so you can still see what changed.
04

guides/03-shopify-robots.md

Installing robots.txt on Shopify — which needs a theme template, not the admin. This is the step most people get wrong.
05

guides/04-ad-protection.md

Meta and Google placement and IP exclusions, plus what the Cloudflare free tier will and will not do for you.
06

guides/05-monthly-check.md

The ten-minute monthly routine, with a tracking log so you can see the trend rather than one reading.
07

blocklists/

Three robots.txt templates — balanced, permissive and strict — around 38 known referral-spam domains, and a full AI crawler reference saying which send buyers and which only take.
08

examples/

A sample traffic export, so you can run the tool before exporting anything of your own.

Specification

Shopify Store Bot Traffic Filter Kit specification
Type	Templates · Browser tool (self-contained HTML), 5 guides (Markdown), 3 robots.txt templates + blocklists
What you get	8
Install	Under 2 minutes
Runs in	Any browser
Made for	Shopify and ecommerce owners running paid traffic
Industry	Ecommerce
Delivery	Instant download — all sales final

The Shopify Store Bot Traffic Filter Kit answers one question — how much of your store’s traffic is automated — and then tells you what to do about it.

The audit tool is a single HTML file. You open it, paste a traffic export, and it scores every source on six signals: near-zero engagement time, bounce at or near 100%, volume with no conversions, known referral-spam domains, known crawler signatures, and volume concentration. Sources are ranked by score multiplied by sessions, so the biggest problems surface first.

The part most guides get wrong is the AI crawlers. Blocking all of them is now the wrong advice: the training-only crawlers take and give nothing back, but the ones that can refer visitors are worth keeping. The kit separates the two and ships a robots.txt that does it for you.

Buy this if

You run a Shopify or ecommerce store and buy paid traffic
Your conversion rate looks worse than your customers' behaviour suggests
You get cheap clicks and healthy click-through and nothing in the basket
You have just seen a traffic spike you cannot explain
You want to check a claim before you believe it

Do not buy this if

You are already behind Cloudflare Enterprise with a bot-management vendor
You want something that blocks scalpers or stops attacks — this is not a security product
You want a monthly app that runs by itself rather than a routine you run

What is not included

Listed here rather than discovered after payment. Sales are final, so the scope has to be unambiguous before you buy.

It is not a security product. It will not stop scalpers, card testing, or an attack in progress.
It reads a summary export, so it judges sources rather than individual sessions.
A lot of automated traffic evades analytics entirely, so your real number is probably higher than the tool shows, not lower.
It cannot tell a bot from a badly targeted ad campaign. Both waste money and both are worth finding, but they are different problems.
robots.txt is a request, not a wall. Well-behaved crawlers honour it; scrapers and click-fraud bots ignore it completely.
It does not connect to Shopify, GA4, Meta or Google. You export, you paste, it reads.
Not affiliated with Shopify, Google, Meta, Cloudflare or Anthropic.

Questions

Is my data safe?

It never leaves your browser. There are no network calls in the file — open the source and check. It works with your internet switched off, which is the simplest proof there is.

Doesn't Shopify block bots already?

It blocks some malicious traffic at the edge. It does not clean your analytics, it does not touch your ad platforms, and it does not decide which AI crawlers you want to keep. Different job entirely.

Will this break my store?

The first two steps change nothing at all — they are measurement and analytics filters. Step three edits robots.txt, and the guide tells you to duplicate your theme first and how to revert in one click.

Won't blocking bots hurt my SEO?

Not with the balanced template — every search engine stays allowed. And blocking Google-Extended does not affect your Google Search ranking; it is a different agent, which is the thing most people get wrong.

I don't use GA4.

Shopify's own referrer report works too, and the export path is in the guide. Any traffic summary with sessions, bounce rate and engagement time per source will do.

Do I need Claude or any AI tool?

No. Nothing to install, nothing to sign up for, no account of any kind. This is the one kit in the range that needs nothing but a browser.

How accurate is it?

It is a signal, not a verdict, and it says so in three places. It reads a summary export so it judges sources rather than sessions, and a large share of bot traffic never appears in analytics at all. Your real number is probably higher than it shows.