Performance only tracks visitors via JavaScript, which is a great catch-all filter for ensuring that reported traffic is coming from an actual person.

With that, Performance distinguishes human activity from bot and other non-human traffic automatically. The non-human sources are kept out of your pageviews and clicks, so you don't see inflated stats.

The only exception is for ways in which we align with how Google Analytics filters bots, so some known-but-acceptable bots (like GTMetrix or Google Pagespeed Insights) are still allowed.