Chantelle.us

date: Wed, 01 Oct 2025 20:10:02 GMT
content-type: text/html
content-length: 162
location: https://us.chantelle.com/
server: nginx
x-content-type-options: nosniff

HTTP/2 200 
age: 2839
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self';base-uri 'self';form-action 'self' facebook.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com maps.googleapis.com *.storemapper.co storemapper-herokuapp-com.global.ssl.fastly.net app.storyblok.com chantsupport.zendesk.com static.zdassets.com widget-mediator.zopim.com ajax.googleapis.com cdn.cookielaw.org acsbapp.com tag.rmp.rakuten.com hotjar.com static.hotjar.com ct.pinterest.com sst2.chantelle.com *.paypal.com paypalobjects.com script.hotjar.com *.air360tracker.net *.air360.io cdn.jsdelivr.net ct.pinterest.com/static/ct/token_create.js clarity.ms *.clarity.ms c.bing.com *.ablyft.com *.zendesk.com analytics.tiktok.com bat.bing.com connect.facebook.net googleads.g.doubleclick.net s.pinimg.com *.contentsquare.net intljs.rmtag.com ut.rd.linksynergy.com static.klaviyo.com static-tracking.klaviyo.com cdn.jsdelivr.net *.google-analytics.com *.air360tracker.net *.air360.io  blob:;object-src 'self' data:;style-src 'self' 'unsafe-inline' fonts.googleapis.com googletagmanager.com tagmanager.google.com *.googletagmanager.com/debug/badge.css tagmanager.google.com/css/css.css static.klaviyo.com *.air360tracker.net *.air360.io fonts.googleapis.com cdn.jsdelivr.net *.ablyft.com;img-src 'self' *.googletagmanager.com *.facebook.com *.google-analytics.com *.google.com image.crisp.chat a.storyblok.com maps.gstatic.com maps.googleapis.com cdn11.bigcommerce.com storemapper-herokuapp-com.global.ssl.fastly.net us.chantelle.com s3.amazonaws.com cl-media-pattern-factory.s3-eu-west-1.amazonaws.com fonts.gstatic.com ct.pinterest.com bat.bing.com media.chantelle.cloud imagedelivery.net customer-q961olsx1bnnmflb.cloudflarestream.com/ idsync.rlcdn.com analytics.tiktok.com connect.facebook.net consent.linksynergy.com cdn.cookielaw.org *.contentsquare.net sst2.chantelle.com *.google.ca *.google.us *.paypalobjects.com t.paypal.com googleads.g.doubleclick.net ik.imagekit.io *.air360tracker.net *.air360.io *.ablyft.com chantsupport.zendesk.com data:;media-src 'self' a.storyblok.com static.zdassets.com ik.imagekit.io customer-q961olsx1bnnmflb.cloudflarestream.com/ *.ablyft.com data: blob:;font-src 'self' fonts.googleapis.com fonts.gstatic.com acsbapp.com static.rakuten.com cdn.honey.io static.klaviyo.com *.paypalobjects.com *.air360tracker.net *.air360.io fonts.gstatic.com cdn.jsdelivr.net data:;connect-src 'self' maps.googleapis.com chantelleus.centraqa.com *.storemapper.co api.keen.io api.storyblok.com chantelle-sandbox.mybigcommerce.com checkout.us.staging.chantelle.cloud api.bigcommerce.com 1CHC3IFVA3-dsn.algolia.net *.algolia.net *.algolia.com *.algolia.io api.openweathermap.org chantsupport.zendesk.com ekr.zdassets.com wss://widget-mediator.zopim.com chantelle.com sst.chantelle.com sst2.chantelle.com chantelle.us cloudflarestream.com *.contentsquare.net customer-q961olsx1bnnmflb.cloudflarestream.com/ region1.analytics.google.com cdn.cookielaw.org privacyportal-fr.onetrust.com acsbapp.com cdn.acsbapp.com process.acsbapp.com geolocation.onetrust.com backend.acsbapp.com a.klaviyo.com fast.a.klaviyo.com static-forms.klaviyo.com static.klaviyo.com api.sandbox.paypal.com *.sandbox.paypal.com api.paypal.com *.paypal.com static-tracking.klaviyo.com *.air360tracker.net *.air360.io *.clarity.ms prodregistryv2.org featureassets.org wss://ws.hotjar.com *.hotjar.io statsigapi.net *.zendesk.com analytics.tiktok.com bat.bing.com ct.pinterest.com *.google.com *.google-analytics.com google.com region1.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net *.facebook.com insights.algolia.io;frame-src *.youtube.com player.vimeo.com *.facebook.com ct.pinterest.com td.doubleclick.net *.sandbox.paypal.com *.paypal.com *.air360.io *.zendesk.com;frame-ancestors app.storyblok.com vercel.app;
content-type: text/html; charset=utf-8
date: Wed, 01 Oct 2025 19:22:42 GMT
etag: W/"14j9wo1j8vc3oav"
referrer-policy: strict-origin
server: Vercel
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
x-frame-options: DENY
x-matched-path: /[[...slug]]
x-powered-by: Next.js
x-vercel-cache: HIT
x-vercel-id: fra1::iad1::s5dp9-1759349402731-bb8705e32efd
x-xss-protection: 1; mode=block