Embeddable on any site
tally.so · 200 OK · 256 ms
No header blocks framing.
Framing rules
- X-Frame-Optionsabsent
The page sends no X-Frame-Options.
- frame-ancestorsabsent
No enforced Content-Security-Policy sets frame-ancestors.
- Set-Cookieabsent
The page sets no cookies, so cookies do not change how it works in a frame.
- Cross-Origin-Resource-Policy: cross-originset
Pages that send Cross-Origin-Embedder-Policy: require-corp need this to allow their origin.
Raw response headers
HTTP 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a5799db50e79aea1-CMH
connection: close
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
date: Mon, 09 Nov 2026 03:08:59 GMT
etag: W/"z1m34kgo1uycj"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Fnm%2Fn1TV%2FFBpz%2B64aXsxCDDic%2B7bCOi%2BwqNDTbTRggsNCtjkuoVZHlpPqkLRvZtqtV4HaS%2F22%2B8ItCZLj2TOMYMmAAdAZz6gJG2PvPil3GIRtmP1uWI4bVvTjWS4arIMajtzf1Hp"}]}
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: Next.jsFetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.