HTTP headers

Referrer-Policy HTTP Header Meaning

Referrer-Policy controls how much referrer information browsers send.

Meaning

The site is setting privacy rules for the Referer header on outgoing requests.

Pages and responses use it to prevent leaking full URLs to other origins.

Check cross-origin navigation behavior and whether analytics, redirects, or embeds require referrer data.

Referrer-Policy: strict-origin-when-cross-origin

no-referrer: Send no Referer header.
origin: Send only the origin, not the full URL.
same-origin: Send the full referrer only for same-origin requests.
strict-origin: Send the origin for secure-to-secure requests, but not from HTTPS to HTTP.
strict-origin-when-cross-origin: Send the full referrer same-origin, and only the origin cross-origin when secure.
no-referrer-when-downgrade: Send the referrer unless navigating from HTTPS to HTTP.