What it reads
The Referrer-Policy header.
Check 27 of 54 · Web and TLS
How much of your web addresses leak to the sites your visitors click through to.
Engine 1.57.0, read 25 October 2026
Is your website set up safely?
The Referrer-Policy header.
Web addresses can carry names, references and tokens. This header limits what travels with a click.
What it finds is shown with a recommendation. It is advice, so it never lowers your score. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Only unsafe-url is flagged, because it sends your full web addresses everywhere. Any other valid policy passes.
Check 27 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.