Embeddable on any site
tally.so · 200 OK · 204 ms
No header blocks framing.
Framing rules
- X-Frame-Optionsabsent
The page sends no X-Frame-Options.
- frame-ancestorsabsent
No enforced Content-Security-Policy sets frame-ancestors.
- Set-Cookieabsent
The page sets no cookies, so cookies do not change how it works in a frame.
- Cross-Origin-Resource-Policy: cross-originset
Pages that send Cross-Origin-Embedder-Policy: require-corp need this to allow their origin.
Raw response headers
HTTP 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a579921a0876ddf0-CMH
connection: close
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
date: Mon, 09 Nov 2026 03:01:03 GMT
etag: W/"d95tlrwq3yycj"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2AL%2FfZfLlQW7QN7WBRrDE6gRYcVOlNEuExI1tOWPuLtzStuOjSgVmYmXFLfSOvVk91d7UGr3BZXHBgrQ3aEZf44ZfqdsB3sQUrlJ0izgsUcWzaQ9BQn8hEUNeHnhX5NmfqBYJTcc"}]}
server: cloudflare
transfer-encoding: chunked
vary: Accept-Encoding
x-powered-by: Next.jsFetched from our server with a plain browser request. Headers can differ by region, or when you are signed in.