LegibleBot
You found LegibleBot in your logs.
LegibleBot fetches a handful of public pages when someone runs a Legible scan of your store. It does not crawl, index, train models or resell content. Here is exactly what it does.
How to recognise it
Every request but one carries this user agent:
Mozilla/5.0 (compatible; LegibleBot/1.0; +https://legible.digitalage.studio/bot)
Requests come from Cloudflare's network, so there is no fixed IP range to allow-list.
When it visits
Only when a person types your store's address into Legible and starts a scan. That person may be you, your agency or someone evaluating your store. There is no background crawling and no scheduled re-scanning.
Because every scan is requested by a person, LegibleBot behaves like other user-triggered agents (for example ChatGPT-User): it reads robots.txt to report on AI agents, but it does not treat its own entry there as a refusal. If you do not want it to visit, use the opt-out below and we will refuse scans of your domain.
What one scan requests
At most 15 GET requests, never more than two at a time, each with an 8-second timeout and a 2.5 MB size cap. No JavaScript is executed, no forms are submitted, nothing is added to a cart and no account is used.
| Request | Why |
|---|---|
| robots.txt | To report which AI agents your rules allow. |
| Homepage | Fetched as LegibleBot, as an AI agent would see it. |
| Homepage, as a browser | Once, with an ordinary browser user agent, to tell whether bot protection treats agents differently from people. |
| HTTP probe | One plain-HTTP request, to confirm it redirects to HTTPS. |
| llms.txt, llms-full.txt | Whether they exist and are well formed. |
| /.well-known/ucp | The Universal Commerce Protocol profile, if any. |
| XML sitemaps | Up to three, to find one product page. |
| One product page | Fetched as LegibleBot, to read product facts and structured data. |
Each visitor can run a limited number of scans per minute and per ten minutes, so LegibleBot cannot be used to flood a site.
What happens to what it reads
The pages are analysed in memory and turned into a report: scores, short excerpts used as evidence, generated fixes and a log of the requests above. The report is kept for 90 days at an unlisted link and then deleted. See the privacy notice.
Opt out
Email prodaja@digitalage.studio from an address at your domain, or tell us how you manage it. We add the domain and its subdomains to a block list, usually within two working days, after which Legible refuses to scan it. You can also block the user agent above at your CDN or firewall; Legible will then report a bot wall to whoever scans you.