HTTP/2 200 
date: Fri, 31 Oct 2025 20:04:46 GMT
content-type: text/html; charset=utf-8
alt-svc: h3=":443"; ma=86400
cache-control: s-maxage=31536000
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Kr%2FXs7S7Wr10kqK2sOOfd8LnEW%2FoaXVz%2Fz9hncuiNoVAk2Sqe22l%2BC6klVdE2mufoPDeTjBAMS1i7TuKoObzyX%2B8nSwynXinjIFbkyIgcUJcXIMpHsHRQcnN"}]}
content-security-policy: default-src 'self' https: http:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https: http: *.stripe.com *.firebaseapp.com *.firebase.googleapis.com *.firebaseio.com identitytoolkit.googleapis.com securetoken.googleapis.com *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.posthog.com *.featurebase.app *.senja.io *.sentry.io *.jsdelivr.net *.cloudflareinsights.com *.cloudflare.com *.partnero.com https://t.co *.prismic.io *.youtube.com *.vimeo.com companion.transcript.lol *.uppycdn.com *.transloadit.com; style-src 'self' 'unsafe-inline' https: *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.posthog.com *.featurebase.app *.senja.io *.partnero.com https://t.co; font-src 'self' data: https: *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.posthog.com *.featurebase.app *.senja.io; img-src 'self' data: blob: https: http:; media-src 'self' data: blob: https:; connect-src 'self' wss: ws: https: http: *.stripe.com *.firebaseapp.com *.firebase.googleapis.com *.firebaseio.com identitytoolkit.googleapis.com securetoken.googleapis.com *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.posthog.com *.featurebase.app *.senja.io *.sentry.io *.jsdelivr.net *.cloudflareinsights.com *.cloudflare.com *.partnero.com https://t.co *.prismic.io *.youtube.com *.vimeo.com companion.transcript.lol *.uppycdn.com *.transloadit.com; worker-src 'self' blob: data: *.stripe.com *.firebaseapp.com *.firebase.googleapis.com *.firebaseio.com identitytoolkit.googleapis.com securetoken.googleapis.com *.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.doubleclick.net *.posthog.com *.featurebase.app *.senja.io *.sentry.io *.jsdelivr.net *.cloudflareinsights.com *.cloudflare.com *.partnero.com https://t.co *.prismic.io *.youtube.com *.vimeo.com companion.transcript.lol *.uppycdn.com *.transloadit.com; frame-src 'self' https: http: *.stripe.com *.youtube.com *.vimeo.com *.featurebase.app *.senja.io companion.transcript.lol *.uppycdn.com *.transloadit.com; object-src 'none'; base-uri 'self'; form-action 'self' https: http:;
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policy: camera=*, microphone=*, geolocation=*, payment=*, autoplay=*, encrypted-media=*, picture-in-picture=*, display-capture=*
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=86400
vary: Accept-Encoding
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-nextjs-cache: HIT
x-nextjs-prerender: 1
x-nextjs-stale-time: 4294967294
x-powered-by: Next.js
cf-cache-status: DYNAMIC
content-encoding: br
server: cloudflare
cf-ray: 9975c369ec3ad2ff-MCI