๐Ÿงญ Referrer-Policy Header Builder

Generated header
Referrer-Policy: strict-origin-when-cross-origin

Choose and generate a Referrer-Policy header, which controls how much information the browser includes in the Referer header when a visitor clicks a link to another site, from the eight values defined by the spec.

How to use

  1. Select the policy you want to apply from the list.
  2. The generated Referrer-Policy header string is shown automatically.
  3. Use the "Copy" button to copy the header string and set it on your web server or in a meta tag.

FAQ

What is Referrer-Policy?

It's an HTTP header that controls how much information is included in the Referer header sent to the destination site when a visitor navigates away โ€” letting you omit all or part of the originating URL for privacy.

Which policy should I choose?

Most major browsers default to strict-origin-when-cross-origin, a balanced setting that sends the full URL to same-origin destinations and only the origin to cross-origin (and otherwise secure) destinations. It's a good default if you're unsure.

Can this be set somewhere other than an HTTP header?

Yes โ€” the same value can be set with an HTML `<meta name="referrer" content="...">` tag. If both the HTTP header and a meta tag are present, the page-level setting takes precedence.