Why/How is my internal product information public facing?

[dannye770]

My website content is getting scraped by bots and my product listings are being re-posted on fraudulent websites. I've dealt with several instances of this recently; several copyright infringement takedown requests, etc. That's enough of a headache on its own. 

The thing I'm trying to figure out is that the "Vendor" field from my products is somehow being included in the data that is being scraped, even though it is not being displayed in my product listing or in the search engine metadata. I know this because I don't use this field for the actual "vendor" of the product, but rather, the private individual I bought the goods from. It is an internal note for myself. But this internal note is showing up in the scraped data that is being posted to fraudulent websites. 

Can anyone tell me if the Vendor field is supposed to be public facing, part of the metadata of a product listing? What about other fields? Is there a place I can find a complete listing of the fields that are shared outside of my organization? And is there a way to alter what is being included in this way? I'm using the Craft theme (currently v13, but about to upgrade to v15.2).

[tim · Accepted solution]

If you add a .js (or .json) to your product page URL (like yoursite.com/products/XXX.js) you will see a list of all product data visible to everybody.

This will look like:

but with proper chrome extension it will be better formatted:

[dannye770]

Thanks Tim - this is very helpful!

So - now that I can see what is being shown publicly, do you know how can I change it? I assumed I would be able to find it in my product.json template code, but I don't see anything there. Not finding it in any snippets or other code either. Any guidance would be wonderful!

Thanks,
Dan

[tim]

You can't. This is automatically generated by Shopify and you can't change it. And can't change its format.

template/product.json is a template for your product page, not for .json output, do not mess with it.

You can move this data to metafield(s), can be relatively easy automated and will not be shown.

[dannye770]

Shoot! Well that really stinks. I would expect that most small businesses out there wouldn't actually want folks to know who their vendors are for things. The brands of their goods, certainly, that makes sense, but not the vendors. 

We'll have to adjust our data keeping methods to discontinue use of that field. Thanks for your help.