HTTP/2 200 date: Mon, 29 Dec 2025 19:06:41 GMT content-type: text/html; charset=utf-8 status: 200 OK vary: Accept, Accept-Encoding, Origin content-encoding: gzip feature-policy: gyroscope 'none'; camera 'self'; microphone 'self'; usb 'none'; fullscreen 'self'; payment 'self' * x-request-id: 0d49cc68-1501-4287-95eb-ae35a6340ed5 etag: W/"fcf2db6e2499123cd5d29eae9ef440ba" x-frame-options: SAMEORIGIN content-security-policy: block-all-mixed-content; default-src 'self' https:; font-src 'self' https: data: https://fonts.googleapis.com; img-src 'self' https: data: blob:; object-src 'self'; worker-src 'self' data: blob:; connect-src 'self' blob: https://d1r3imgd1iwr6l.cloudfront.net https://tandemvault-asset-uploads-development.s3-accelerate.amazonaws.com https://mediagraph-embeds.s3.amazonaws.com https://dvnyn05pgqkzt.cloudfront.net https://api.mediagraph.io https://api.locize.app https://ekr.zdassets.com https://damsoftware.zendesk.com wss://widget-mediator.zopim.com wss://mediagraph.io https://zendesk-eu.my.sentry.io https://sessions.bugsnag.com https://maps.googleapis.com https://notify.bugsnag.com/ https://challenges.cloudflare.com https://api.box.com/ https://appsignal-endpoint.net wss://pod-20.zendesk.com/sc/faye https://pod-20.zendesk.com/sc/faye https://cdn.jsdelivr.net; frame-src 'self' https: https://player.vimeo.com https://challenges.cloudflare.com https://js.stripe.com; media-src 'self' blob: https://d1r3imgd1iwr6l.cloudfront.net https://tandemvault-asset-uploads-development.s3-accelerate.amazonaws.com https://mediagraph-embeds.s3.amazonaws.com https://dvnyn05pgqkzt.cloudfront.net; script-src 'self' https: 'wasm-unsafe-eval' https://api.mediagraph.io https://cdn01.boxcdn.net https://www.dropbox.com https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://challenges.cloudflare.com https://js.stripe.com https://cdn.jsdelivr.net 'nonce-5cee8aea04e77991e3c10b4824686d40'; style-src 'self' https: 'unsafe-inline' https://cdn01.boxcdn.net; report-uri /csp-violations cache-control: max-age=0, private, must-revalidate strict-transport-security: max-age=63072000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block x-download-options: noopen x-runtime: 0.032339 x-content-type-options: nosniff set-cookie: _mediagraph_session=2YHl3tXltH7Dz5m5J5DhmfIS2k2kYZ96TKPAweofCuO9HAiVhxzqnX2PwGijSyB%2FvmWzv3Yd2xmP3MaRifnj0JhaG2q3lBPil3IzvMVmEMSZP6VjpWOmMJ8DduV723MvI6B3DOKxabbZZ03j6yWF5JYP85b5m5X1hsaeOzVRlZTAFjn85v2M357xA53Ot%2F7IrX23k0ZUcSnvRFXmiMW0wUIMzohm8hs9wN4oHHzYsnr3QPl%2BtC%2BZL5clYnhBlXEIONVGcuZGMqGO3RoQTHvAxsOBb%2BUT2lPa%2Fp%2BQ--ttEaXM1bj7IjGisR--SBkeWnkaTWcmaX7c2B0kyw%3D%3D; path=/; secure; HttpOnly x-powered-by: Phusion Passenger(R) 6.0.27 server: nginx + Phusion Passenger(R) 6.0.27 x-powered-by: cloud66 set-cookie: AWSALBAPP-0=_remove_; Expires=Mon, 05 Jan 2026 19:06:41 GMT; Path=/ set-cookie: AWSALBAPP-1=_remove_; Expires=Mon, 05 Jan 2026 19:06:41 GMT; Path=/ set-cookie: AWSALBAPP-2=_remove_; Expires=Mon, 05 Jan 2026 19:06:41 GMT; Path=/ set-cookie: AWSALBAPP-3=_remove_; Expires=Mon, 05 Jan 2026 19:06:41 GMT; Path=/