Embeddable on any site

tally.so · 200 OK · 255 ms

No header blocks framing.

Framing rules

  • X-Frame-Optionsabsent

    The page sends no X-Frame-Options.

  • frame-ancestorsabsent

    No enforced Content-Security-Policy sets frame-ancestors.

  • Set-Cookieabsent

    The page sets no cookies, so cookies do not change how it works in a frame.

  • Cross-Origin-Resource-Policy: cross-originset

    Pages that send Cross-Origin-Embedder-Policy: require-corp need this to allow their origin.

Raw response headers

HTTP 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a5799db2ab2f70f3-CMH
connection: close
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
date: Mon, 09 Nov 2026 03:08:58 GMT
etag: W/"of6xnnqadtyco"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=R0Jyb1WNgVvEZQ9UjL9TjecN%2BXDoTlrYZcqrM83ZNQev9LW5P%2Fzsp4kAoi%2Fm%2FMdgm%2BwRdaqSDVJOuA30lnkD0QaPeoE7bT57RgbbiDGhRKM9DhXwjDbnWPn6Dn4KvHLWyCrJWkiW"}]}
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: Next.js

Fetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.

Know before you embed.

Free, no sign-up, nothing stored. Paste a URL and get a verdict, a live preview, and the fix.