// HOW-TO · CREATOR RIGHTS

How to opt out of AI training while staying search-discoverable (2026)

Opt out of AI training without losing search: block the training crawlers, keep the retrieval crawlers, and verify you are still findable in AI answers.

Last verified · 2026-09-16 · by Moe Ameen

The mistake most people make when they opt out of AI training is not opting out — it is opting out with a sledgehammer. A single "block all AI bots" rule feels thorough and quietly deletes you from ChatGPT, Perplexity, Claude search, and Google's AI answers, because it catches the crawlers that surface you along with the ones that train on you. This tutorial does the same job with a scalpel: it blocks the training crawlers by name, keeps the crawlers that keep you findable, and — the part almost every guide skips — verifies that a search crawler can actually still read your site afterward.

Hold one fact in view before you start: the crawlers reading your site do different jobs. Training crawlers absorb your content into a model with no link back. Search-index and answer-retrieval crawlers exist to surface and cite you. They are separate user-agents you control independently, which is the whole reason "opt out of training" and "stay discoverable" are compatible rather than opposed. The strategy behind these steps — the four crawler classes and what discoverability means across surfaces — is in the companion guide, [AI training opt-outs while staying search-discoverable](/guides/ai-training-opt-out-while-staying-search-discoverable). For the broader opt-out checklist across chat tools and platforms, see [how to opt out of AI training on your content](/how-to/opt-out-of-ai-training-on-your-content).

The steps

  1. Decide what to keep before you decide what to block. Invert the usual order. List the crawlers you must keep first: Googlebot (classic search index plus Google's AI Overviews and AI Mode), OAI-SearchBot (ChatGPT search), Claude-SearchBot (Claude search), and PerplexityBot (Perplexity citations). These are pure discoverability — none of them trains foundation models, and blocking any of them removes you from a surface people use to find you. Writing this keep-list first stops you from reaching for a blanket rule, because you now have concrete names you know you cannot afford to sweep up.
  2. Disallow the training crawlers by name in robots.txt. In your site's robots.txt, add explicit disallow blocks for the known training user-agents: GPTBot (OpenAI), Google-Extended (Google's training token — blocking it does not affect Google Search), ClaudeBot (Anthropic), and CCBot (Common Crawl, which feeds many datasets), plus Applebot-Extended and Bytespider if you want to exclude them too. Give each its own User-agent line with Disallow: / so your intent is unambiguous. The major companies publicly honor these directives; this is the block half of the split.
  3. Explicitly allow the index and retrieval crawlers. Do not leave the keep-list to chance. Add explicit User-agent blocks for Googlebot, OAI-SearchBot, Claude-SearchBot, and PerplexityBot with Allow: / (or simply no disallow), so a crawler that honors the file sees a clear permission rather than inferring one. The user-triggered fetchers — ChatGPT-User, Claude-User, Perplexity-User — run only when a person asks an assistant to read a page, so keep them allowed too unless you have a specific reason to block on-demand reads. Naming the keep-list defends it against a future edit that adds a careless wildcard.
  4. Audit the layer robots.txt can't reach: your WAF and CDN. robots.txt is an explicit, per-user-agent instruction, but a WAF or CDN blocks on behavior — request rate, missing browser fingerprints, no JavaScript execution, data-center IP reputation. Retrieval crawlers trip every one of those signals because they fetch fast, often skip JavaScript, and come from data-center ranges. So a firewall rule tuned to stop scrapers can serve OAI-SearchBot or PerplexityBot a challenge page instead of your content, overriding the Allow you just wrote. Review your bot rules and allowlist the verified search-crawler user-agents and IP ranges where your provider supports it. The deeper version of this is in [block AI crawlers: robots.txt vs server rules](/how-to/block-ai-crawlers-robots-txt-vs-server-rules).
  5. Verify what each crawler actually receives. This is the step that separates a correct config from a config you assumed was correct. Do not trust that the page loads for you — your browser sails past challenges a headless crawler cannot. Check your server and WAF logs for the retrieval-crawler user-agents getting non-200 responses, and confirm your key pages return real content, not a challenge interstitial or a JavaScript-only shell, to a client that does not run JavaScript. Fetch a page with each allowed user-agent string and inspect the response. If a search crawler gets anything other than your content, your robots.txt is irrelevant — the firewall is deciding, and the AI answer will simply omit a site it could not read.
  6. Cover the surfaces robots.txt can't govern. Your robots.txt controls exactly one surface: the domain you own. The platforms you publish on have their own training toggles, so flip the ones that matter — LinkedIn (Settings & Privacy, then Data Privacy), X (Privacy and safety), and others each hide a switch, and most enroll you by default. Just as important for discoverability: answer engines crawl third-party surfaces like YouTube, LinkedIn, and Reddit independently of any file on your site, and those are where most citations are actually earned. Being genuinely present there is not something a robots.txt can do for you.
  7. Confirm you are still cited, then re-check on a schedule. Close the loop by measuring the surface you were protecting. Run your key category queries through ChatGPT, Perplexity, Claude, and Google's AI answers and confirm you still appear — eligibility on paper is not the same as an actual citation. Then set a recurring reminder (quarterly is reasonable), because crawler landscapes shift: new engines launch, user-agents get renamed, and provider defaults drift back toward enrollment, so last quarter's allowlist quietly goes stale. The measurement workflow is in [check if AI search is citing your content](/how-to/check-if-ai-search-is-citing-your-content).

Common gotchas

  • The blanket rule is the classic self-inflicted wound: a wildcard "block all AI bots" catches OAI-SearchBot, Claude-SearchBot, and PerplexityBot along with the training crawlers, removing you from the AI answers you were trying to stay in.
  • A behavioral WAF/CDN rule silently overrides robots.txt. Your file can say Allow while your firewall serves the same crawler a challenge page — an invisible block you never configured. Verify what crawlers receive; do not assume.
  • Blocking Google-Extended does not remove you from AI Overviews. Those are built from the Googlebot index, so as long as you are in Search you can appear in Google's AI answers — there is no clean setting that keeps full search presence while excluding you from them.
  • robots.txt is a voluntary request (RFC 9309) with no technical enforcement. Well-behaved crawlers honor it; a crawler that ignores it faces nothing at the file. Real blocking lives at your server or CDN.
  • Keeping OAI-SearchBot, Claude-SearchBot, or PerplexityBot allowed does not opt you back into training — those crawlers surface and cite pages; they are separate from the training crawlers you disallowed.
  • robots.txt only governs your own domain. The third-party surfaces answer engines cite most (YouTube, LinkedIn, Reddit) are outside its reach entirely, so a perfect file still leaves most of your discoverability to be earned by publishing.
Legal note

Opt-out mechanisms carry different weight in different places. In the EU, the copyright text-and-data-mining framework treats a properly expressed, machine-readable opt-out as legally meaningful — content may be mined by default unless rights are reserved, and general-purpose AI providers are expected to respect a valid reservation. In the US there is no equivalent statute, so robots.txt directives and platform toggles are largely voluntary or contractual rather than a legal right, and disputes run through the courts case by case. This area moves fast; confirm current behavior in each provider's own crawler documentation before relying on any single control.

Where Kompozy fits

Finish the config above and you have confirmed one thing: you are eligible to be found. That is not the same as being cited. A retrieval crawler can only quote a page worth quoting, and when it chooses between eligible sources it favors the one with the broadest, most current coverage of the question — so the payoff of a careful opt-out only lands if there is genuine substance on the surfaces those crawlers watch. The last two steps of this tutorial pointed at the gap: the citations you can earn live mostly on third-party surfaces your robots.txt cannot govern, and being present there is a production job, not a settings job.

Kompozy is a content generation and multi-platform publishing engine built for exactly that half. From one idea it generates 18 output formats — Persona Shorts and other avatar and clipped video, carousels, images, blogs, newsletters, and text — then schedules and fans them across the eight primary social platforms plus blog and email in a single pass. The tie to this task is direct: those are the surfaces answer engines crawl independently of any file on your domain, so publishing genuinely on-brand content on them is how you turn the eligibility you just protected into coverage across the query space where citations are decided. A Persona Brief holds your voice and banned-phrase rules across every asset, so a model reading you on a dozen surfaces assembles one consistent picture, and Autopilot keeps the queue full behind a per-post review gate so the surfaces stay current rather than crawlable-but-stale.

To be clear about the boundary: Kompozy does not write your robots.txt or configure your firewall — that crawler-sorting and verification work is yours, and this tutorial is how to do it. What Kompozy removes is the production constraint that otherwise leaves your protected eligibility with nothing to attach to. Creator ($49/mo for 2,500 credits) fits a solo creator keeping a consistent cross-platform cadence; Pro ($299/mo for 18,000 credits) covers a brand or small team publishing across every channel weekly; Enterprise is custom for agencies running many brands.

Frequently asked questions

Will opting out of AI training drop my Google rankings?

No, as long as you only block training crawlers. GPTBot, ClaudeBot, and CCBot have nothing to do with Google. Google-Extended is a training token separate from Googlebot, so blocking it opts you out of training Gemini without touching your search ranking or removing you from results. Rankings only move if you block Googlebot itself, which is the crawler that builds the search index — so never disallow it.

What robots.txt rules block training but keep AI search?

Give each training crawler its own User-agent block with Disallow: / — GPTBot, Google-Extended, ClaudeBot, CCBot, and optionally Applebot-Extended and Bytespider. Then add explicit blocks for the crawlers you keep — Googlebot, OAI-SearchBot, Claude-SearchBot, PerplexityBot — with Allow: / so your permission is unambiguous. Avoid any wildcard "User-agent: *" rule aimed at AI, because it collapses the distinction and sweeps the retrieval crawlers in with the training ones.

How do I verify a search crawler can still read my site?

Do not trust that the page loads in your browser — you pass challenges a crawler cannot. Check your server and WAF logs for the retrieval-crawler user-agents receiving non-200 responses, and fetch your key pages with each allowed user-agent string to confirm they return real content rather than a challenge page or a JavaScript-only shell. If a search crawler gets anything other than your content, your firewall is overriding your robots.txt and you are invisible to that answer engine.

Does keeping OAI-SearchBot allowed mean OpenAI trains on my content?

No. OpenAI runs separate crawlers for separate jobs. GPTBot gathers content that may train foundation models; OAI-SearchBot surfaces sites inside ChatGPT's search and, per OpenAI's documentation, is not used to train those models. Blocking GPTBot while allowing OAI-SearchBot opts you out of training while staying eligible for ChatGPT citations. Anthropic draws the same line between ClaudeBot (training) and Claude-SearchBot (search).

Do I still need to do this if my site is behind Cloudflare?

Yes, and more carefully. Since July 1, 2025 Cloudflare has offered blocking AI crawlers by default and exposes granular per-crawler controls. That is powerful, but a default or broad block can catch the retrieval crawlers you want to keep, so use the per-crawler settings rather than an all-or-nothing switch, and verify that Googlebot, OAI-SearchBot, Claude-SearchBot, and PerplexityBot are not being challenged. The firewall layer is exactly where a well-meant block quietly removes you from AI answers.

Related tutorials

← All how-to guides · Get Started