How to set a Referrer-Policy
It controls how much of your page address is shared with other sites when visitors click out.
Why it matters
Page addresses can contain search terms, order numbers or reset tokens. Without a policy, older browsers send the full address to every site you link to.
Steps
- Add the header Referrer-Policy: strict-origin-when-cross-origin.
- Reload and confirm analytics still attribute traffic correctly.
For your developer
Referrer-Policy: strict-origin-when-cross-origin
Check it worked
Check for referrer-policy in the response headers, then rescan.
Not sure if this affects your site?
Run a free scan to see exactly which of these your website needs.