Rightshold™ Sign up

Answers · AI crawlers

If I block Common Crawl's CCBot in robots.txt, does that take my site out of Common Crawl and the AI models trained on it, or only stop future crawls?

Last updated

TL;DR: Only going forward. Common Crawl says CCBot checks robots.txt before fetching, and that "User-agent: CCBot" with "Disallow: /" stops it crawling your site; it keeps re-checking the file, so the rule takes effect on later crawls. It doesn't touch what's already been collected. Common Crawl's archives are stored as WARC files that it says it can't edit after publication, so when a publisher asks for removal it filters those URLs out of later crawls and makes them inaccessible through its public tools and indices; it also says this work isn't instantaneous. Legal removal requests go to info@commoncrawl.org, and since September 17, 2025 Common Crawl has published an Opt-Out Registry listing the legal requests it has received. Neither step reaches copies made before you opted out: filtered datasets built from Common Crawl, such as C4, Pile-CC and Hugging Face's FineWeb, are separate copies with their own removal processes, and models already trained on that data don't change. Blocking CCBot also doesn't block GPTBot, ClaudeBot, Google-Extended, Applebot-Extended or any other crawler; each one needs its own line. So block CCBot now if you don't want to be in future crawls, and treat anything already archived as out of your hands unless you pursue removal with each dataset.

What should I check, step by step?

1. Add a CCBot group to robots.txt: "User-agent: CCBot" then "Disallow: /". Common Crawl says this stops the crawler, and it re-checks robots.txt periodically. If you only want it slower, it honours Crawl-delay instead.

  1. Add separate lines for the other training crawlers you want to keep out (for example GPTBot, ClaudeBot, Google-Extended, Applebot-Extended, meta-externalagent). A CCBot rule only applies to CCBot.
  2. Make sure robots.txt itself loads: a 200 with plain text at /robots.txt on every host you serve (www and the bare domain), not a login page, a redirect loop or a firewall challenge.
  3. Check your logs for fake CCBot traffic. Common Crawl says other crawlers falsely use its name. Real CCBot comes from the ranges in index.commoncrawl.org/ccbot.json, and IPv4 addresses reverse-resolve to *.crawl.commoncrawl.org and forward-resolve back to the same IP. Treat anything else claiming to be CCBot as a scraper.
  4. To see whether your pages were captured, query the CDX index for a recent crawl (index.commoncrawl.org lists them; the newest is CC-MAIN-2026-43, October 2026) with url=yourdomain.com/* and output=json. Go slowly: the API is heavily rate limited and blocks clients that send too many requests.
  5. For content already collected, send a removal request to info@commoncrawl.org naming your domains and URLs, and keep the reply. Common Crawl describes removal as multi-step and says its index tools aren't a legal confirmation of removal, so ask what it has done and when.
  6. Contact downstream datasets separately if it matters to you. FineWeb's dataset card links a removal form for personal information and its changelog records domains removed after a cease-and-desist notice; other datasets have their own processes or none.
  7. Don't rely on JavaScript to hide paid or private text. CCBot doesn't execute JavaScript, so if the full text is in the HTML and only hidden by a script, the crawler receives the full text. Serve restricted content only after login.
  8. Keep a dated copy of your robots.txt each time you change it, so you can show when you opted out if a dispute ever turns on timing.

Does blocking CCBot in robots.txt stop Common Crawl from crawling my site?

CCBot identifies itself as CCBot/2.0 (https://commoncrawl.org/faq/). Common Crawl's FAQ says it checks robots.txt first and fetches a page only if crawling is allowed, follows Crawl-delay, honours nofollow on your links, supports conditional GET, and backs off when a site returns 429 or 5xx errors.

Does Common Crawl delete pages it already archived when you opt out?

In a November 4, 2025 statement, Common Crawl's executive director Rich Skrenta said its archives are stored in an immutable format (WARC files) that it can't edit after publication without breaking their integrity, so in response to removal requests it removes or filters affected URLs from subsequent crawls and makes them inaccessible through its public tools and indices. He added that a "no captures" result in its search tools reflects how indices are generated, not what is stored internally, and that no one at Common Crawl has claimed the work is instantaneous or complete.

Does removing my site from Common Crawl remove it from AI training datasets like C4 or FineWeb?

Most AI builders don't train on raw Common Crawl. Mozilla Foundation's February 2024 report found that at least 30 of 47 text-generation models released between 2019 and October 2023 (64%) used at least one filtered version of it, usually one published by someone else, such as Google's C4 or EleutherAI's Pile-CC. It also noted that filtered Common Crawl made up more than 80% of the tokens in OpenAI's GPT-3 training data.

How do I ask Rightshold about this (free, no key)?

Add the MCP server https://www.rightshold.com/mcp to Claude, Cursor, ChatGPT, Grok or VS Code, then ask: “What does example.com's robots.txt tell CCBot and the other AI training crawlers right now? Is CCBot actually disallowed on every path, or only some, and which training crawlers are still allowed?”

One-click setup

{
  "tool": "read_ai_policy",
  "arguments": {
    "domain": "example.com"
  }
}

Rightshold reads a site's public crawl and AI-use signals. It isn't affiliated with Common Crawl or Hugging Face, doesn't see your traffic, and can't remove content from any archive, dataset or model. Common Crawl's practices are as described in its FAQ and statements cited here and may have changed; the disputed points between Common Crawl, The Atlantic and publishers are reported as each side stated them. Not legal advice.

What are the sources?

Related

Not legal advice. JSON · Markdown · All answers

Get a free API key in one call

No card and no email needed. 100 free credits; the license and policy checks stay free without a key.

curl -s -X POST https://www.rightshold.com/v1/accounts/signup -H "Content-Type: application/json" -d '{"accept_terms":true}'
export RIGHTSHOLD_API_KEY=rs_...   # the api_key from the reply (shown once)
curl -s https://www.rightshold.com/v1/licenses/check -H "Authorization: Bearer $RIGHTSHOLD_API_KEY" \
  -H "Content-Type: application/json" -d '{"license":"MIT","intended_use":{"commercial_use":true}}'