HTTP/2 200 date: Tue, 20 Jan 2026 01:27:03 GMT content-type: text/html; charset=utf-8 x-pf-trace-id: Root=1-696ed2f4-29fcf7af028975985fc07bd6 report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oxiaOoRmfxBo4vShRQO0%2BntSKdJR%2Fz%2BPNzAdv%2FsZr065Ac32ODtFsafOXc2x9Xktdn4WiUGMkKplhUT4F6Yl99SKHP7AxTjv9DzjtpIu523WYDY%3D"}]} nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} cf-ray: 9c0ac986891f7766-BOM cf-cache-status: DYNAMIC age: 1778 cache-control: public, max-age=300, stale-while-revalidate=31557600, stale-if-error=31557600 server: cloudflare set-cookie: AWSALB=ruZw2DsWSNH2ZfNHJ+yOxilziQGcfTzgZv33DauQn8q40HhO+q+FbqAWT4sBOQIIF/StA/q5mBpiZEJUIRHcmUPFOOTUWeU1VpRGO4Q4a+DDVhvg673WKZPzmxys; Expires=Tue, 27 Jan 2026 00:57:24 GMT; Path=/ set-cookie: AWSALBCORS=ruZw2DsWSNH2ZfNHJ+yOxilziQGcfTzgZv33DauQn8q40HhO+q+FbqAWT4sBOQIIF/StA/q5mBpiZEJUIRHcmUPFOOTUWeU1VpRGO4Q4a+DDVhvg673WKZPzmxys; Expires=Tue, 27 Jan 2026 00:57:24 GMT; Path=/; SameSite=None strict-transport-security: max-age=15552000; includeSubDomains vary: Origin,Accept-Encoding via: 1.1 d04a769bc9c2fcda0d38a6134a31036a.cloudfront.net (CloudFront) cf-cache-control: content-security-policy-report-only: default-src 'self'; script-src 'self' https://*.passionfroot.me 'unsafe-inline' 'unsafe-eval' https://*.clerk.accounts.dev https://clerk-telemetry.com https://js.stripe.com https://api.stripe.com https://*.segment.io https://*.segment.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://*.clarity.ms https://*.eu.amplitude.com https://eu-assets.i.posthog.com https://eu.i.posthog.com https://*.analytics.google.com https://*.doubleclick.net https://assets.cello.so https://share.cello.so https://consent.cookiefirst.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; connect-src 'self' https://*.passionfroot.me https://*.clerk.accounts.dev https://clerk-telemetry.com https://o1244808.ingest.sentry.io/api/4504292779163648/ https://assets.cello.so https://share.cello.so https://*.segment.io https://*.segment.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://*.clarity.ms https://*.eu.amplitude.com https://eu-assets.i.posthog.com https://eu.i.posthog.com https://*.analytics.google.com https://*.doubleclick.net wss://d1wp5tpcfl2exx.cloudfront.net https://*.typesense.net https://pf-assets.s3.eu-central-1.amazonaws.com https://invoices-prod-sh1605ir.s3.eu-central-1.amazonaws.com https://consent.cookiefirst.com; img-src * data: blob:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://fonts.intercomcdn.com; frame-ancestors 'self'; frame-src 'self' https://js.stripe.com https://api.stripe.com https://assets.cello.so https://share.cello.so; media-src 'self' blob: https://*.segment.io https://*.segment.com https://*.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://*.clarity.ms https://*.eu.amplitude.com https://eu-assets.i.posthog.com https://eu.i.posthog.com https://*.analytics.google.com https://*.doubleclick.net; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri https://workspace.passionfroot.me/api/csp-report; report-to csp-endpoint referrer-policy: strict-origin-when-cross-origin reporting-endpoints: csp-endpoint="https://workspace.passionfroot.me/api/csp-report" x-amz-cf-id: v8GI-ET5ol1EnJ2gImBbP_48krjk2KKVibgyZxXa8-Fw2Bl7BFld0g== x-amz-cf-pop: MAA51-P2 x-cache: Hit from cloudfront x-content-type-options: nosniff content-encoding: gzip