HTTP/1.1 200 OK
Age: 231971
Cache-Control: public, max-age=0, must-revalidate
Content-Length: 215392
Content-Security-Policy: base-uri 'none';child-src 'none';connect-src 'self' *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com analytics.tiktok.com *.yotoplay.com;default-src 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'none';frame-src player.vimeo.com;img-src 'self' data: 'unsafe-inline' www.datocms-assets.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com www.google.com www.google.co.uk;manifest-src 'self';media-src 'self' cdn.yoto.io cdn.shopify.com;object-src 'none';prefetch-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com *.onetrust.com *.clarity.ms www.facebook.com connect.facebook.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com cdn.jsdelivr.net analytics.tiktok.com www.googleoptimize.com *.yotoplay.com www.dwin1.com;style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com;worker-src 'self';
Content-Type: text/html; charset=utf-8
Date: Thu, 21 Apr 2022 13:20:43 GMT
Etag: "34960-ney1cv+p3lwI4GSTqB0rvr1aRg8"
Feature-Policy: clipboard-read 'none';clipboard-write 'none';gamepad 'none';speaker-selection 'none';accelerometer 'none';ambient-light-sensor 'none';autoplay 'none';battery 'none';camera 'none';cross-origin-isolated 'none';display-capture 'none';document-domain 'none';encrypted-media 'none';execution-while-not-rendered 'none';execution-while-out-of-viewport 'none';fullscreen 'none';geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';navigation-override 'none';payment 'none';picture-in-picture 'none';publickey-credentials-get 'none';screen-wake-lock 'none';sync-xhr 'none';usb 'none';web-share 'none';xr-spatial-tracking 'none';
Permissions-Policy: clipboard-read=(),clipboard-write=(),gamepad=(),speaker-selection=(),accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),camera=(),cross-origin-isolated=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),fullscreen=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),navigation-override=(),payment=(),picture-in-picture=(),publickey-credentials-get=(),screen-wake-lock=(),sync-xhr=(),usb=(),web-share=(),xr-spatial-tracking=()
Referrer-Policy: no-referrer
Server: Netlify
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Bb-Except: Cookie=__prerender_bypass,__next_preview_data
X-Content-Security-Policy: base-uri 'none';child-src 'none';connect-src 'self' *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com analytics.tiktok.com *.yotoplay.com;default-src 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'none';frame-src player.vimeo.com;img-src 'self' data: 'unsafe-inline' www.datocms-assets.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com www.google.com www.google.co.uk;manifest-src 'self';media-src 'self' cdn.yoto.io cdn.shopify.com;object-src 'none';prefetch-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com *.onetrust.com *.clarity.ms www.facebook.com connect.facebook.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com cdn.jsdelivr.net analytics.tiktok.com www.googleoptimize.com *.yotoplay.com www.dwin1.com;style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com;worker-src 'self';
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Nf-Request-Id: 01G1D1QK6PXT9CCFNKGPPRBP4X
X-Powered-By: Next.js
X-Render-Mode: odb
X-Webkit-Csp: base-uri 'none';child-src 'none';connect-src 'self' *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com analytics.tiktok.com *.yotoplay.com;default-src 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'none';frame-src player.vimeo.com;img-src 'self' data: 'unsafe-inline' www.datocms-assets.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com www.google.com www.google.co.uk;manifest-src 'self';media-src 'self' cdn.yoto.io cdn.shopify.com;object-src 'none';prefetch-src 'self';script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com *.onetrust.com *.clarity.ms www.facebook.com connect.facebook.net tagmanager.google.com www.googletagmanager.com www.google-analytics.com cdn.jsdelivr.net analytics.tiktok.com www.googleoptimize.com *.yotoplay.com www.dwin1.com;style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com;worker-src 'self';
X-Xss-Protection: 1; mode=block