About ShippingtonBot

You are probably here because you found X-Shippington-Bot in your server logs. Here is exactly what happened and how to stop it.

What it is

Shippington builds a website assistant for a business from that business's own public pages. When someone asks us to build one, we read a handful of pages so the assistant can answer using what the site already says, rather than making things up.

Every request we send carries the header X-Shippington-Bot: https://shippington.co/bot, which is the link that brought you here.

Why it visited you

It is not a crawler. We do not index the web, we do not follow links off your domain, and we do not come back on a schedule. A visit means a specific person typed your address into our site and waited for the result.

One visit reads at most six pages, once, from your domain only. Requests come from Google Cloud in us-central1, or from Anthropic's fetcher when a page needs JavaScript to render.

Why the user agent looks like a browser

We used to name ourselves in the User-Agent string, which is the polite convention. It does not survive contact with commercial firewalls: several returned a flat 403 to a request that a browser was served normally, so a business asking us to read their own website got told we could not read it. We now send a browser user agent and identify in a header instead. That is a deliberate trade, and it is why the header exists.

How to block it

We read and honour robots.txt before fetching anything. To exclude us specifically:

User-agent: ShippingtonBot
Disallow: /

A blanket User-agent: * rule applies to us too. If you would rather we never touch your domain again, or you want an assistant that was built from your site taken down, email vince@shippington.co and it is removed the same day, no questions and no argument.

What we do not do

Questions, or something that looks wrong: vince@shippington.co. A real person reads it.