NoomzyBot

NoomzyBot is the price checker behind Noomzy, a pantry and recipe app for iPhone. When someone using Noomzy opens a recipe, the app shows what its ingredients cost at the grocery store that person picked. NoomzyBot looks up those prices on the store's public product pages.

At a glance

What it fetches

Only public product and price pages: the same pages anyone can open in a browser without signing in. It reads the product name, size, barcode and price. It never logs in, never adds to a cart, never submits forms and never collects anything about other shoppers.

It fetches on demand, not by crawling. A request happens only when a Noomzy user needs a price that is not already known. Each price is cached and shared with other Noomzy users of the same store until it expires, so a store sees at most one request per product per cache period, however many people open the recipe.

Rules it follows

• Obeys robots.txt, including rules for User-agent: NoomzyBot and User-agent: *. It re-reads robots.txt at least once a day.
• Never solves CAPTCHAs or bot challenges and never pretends to be a browser. If a site challenges or blocks it, it stops asking that site.
• Backs off on 429 and 503 and honours Retry-After.
• Uses official APIs instead wherever a store offers one.

Verifying it's really NoomzyBot

NoomzyBot signs every request with Web Bot Auth (HTTP Message Signatures). The Signature-Agent header points to our public key directory:

https://noomzy.app/.well-known/http-message-signatures-directory

A request that uses the NoomzyBot user-agent but has no valid signature did not come from us.

Opting out

To block NoomzyBot from your whole site, add this to your robots.txt:

User-agent: NoomzyBot
Disallow: /

Or block only some paths with Disallow: /path/. NoomzyBot picks up the change within a day. For anything faster, or to ask us to stop or to slow down, email support@oluma-agency.com and we'll act on it within two business days.