Generator

Referrer-Policy Generator

Build the Referrer-Policy header. Controls how much of the URL the browser sends in the Referer header when navigating away from your site.

no-referrer

Never send the Referer header. Most private.

no-referrer-when-downgrade

Send full URL on same-protocol requests; nothing on HTTP from HTTPS.

origin

Send only the origin (https://example.com). No path/query.

origin-when-cross-origin

Full URL same-origin; only origin cross-origin.

same-origin

Full URL same-origin; nothing cross-origin.

strict-origin

Origin only on HTTPS→HTTPS; nothing on downgrade.

strict-origin-when-cross-originrecommended

Browser default. Full URL same-origin; origin cross-origin; nothing on downgrade.

unsafe-url

Always send full URL. Avoid — leaks tokens in querystring.

Header + Meta

# HTTP response header
Referrer-Policy: strict-origin-when-cross-origin

# HTML meta fallback
<meta name="referrer" content="strict-origin-when-cross-origin">