HTTP/2 200 date: Mon, 26 Jan 2026 19:14:05 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip cf-ray: 9c4254cf1e728e4d-BLR cf-cache-status: DYNAMIC cache-control: no-cache, no-store, must-revalidate expires: Tue, 31 Mar 1981 05:00:00 GMT last-modified: Mon, 26 Jan 2026 19:14:05 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload vary: Accept-Encoding via: 1.1 google pragma: no-cache content-security-policy: default-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com;connect-src * blob: data:;script-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com 'unsafe-eval' blob: 'report-sample' 'unsafe-inline';style-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com 'unsafe-inline';img-src 'self' data: https: http: blob:;font-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com data:;child-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com blob:;worker-src 'self' https: *.peoplegrove.com *.pg-test.com apis.google.com www.google.com fonts.googleapis.com www.gstatic.com fonts.gstatic.com *.filestackapi.com www.google-analytics.com www.googletagmanager.com maps.googleapis.com *.facebook.net *.pg.services *.intercom.io *.intercomcdn.com *.mxpnl.com *.stripe.com *.firebaseio.com www.youtube.com *.iframe.ly *.google.co.in *.pg.services cdn.jsdelivr.net *.getbee.io *.logrocket.io *.lr-ingest.io *.logrocket.com *.transloadit.com *.firebaseapp.com *.bootstrapcdn.com *.customer.io *.userway.org *.wistia.com *.wistia.net *.sentry-cdn.com *.trychameleon.com *.chameleon.io *.chmln-cdn.com *.typeform.com blob:;media-src 'self' https: blob: data:;manifest-src 'self';frame-ancestors https:;report-to csp-endpoint permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), battery=(), camera=(self), cross-origin-isolated=(self), display-capture=(self), document-domain=(self), encrypted-media=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(self "https://cdn.iframe.ly/" "https://peoplegrove.wistia.com"), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(*) referrer-policy: strict-origin-when-cross-origin reporting-endpoints: csp-endpoint="https://us-central1-pg-production.cloudfunctions.net/report-uri" x-content-type-options: nosniff x-dns-prefetch-control: off x-download-options: noopen x-frame-options: DENY x-permitted-cross-domain-policies: none x-xss-protection: 0 server: cloudflare