Stickerapp.ca

content-type: text/html
content-encoding: gzip
content-security-policy: default-src     'self' https://app.storyblok.com *.stickerapp.com https://static.klaviyo.com *.klaviyo.com *.crazyegg.com *.doubleclick.net connect.facebook.net *.facebook.com https://bat.bing.com;   child-src     'self' blob:;   frame-src     'self' * *.edb.com https://www.youtube.com https://checkoutshopper-test.adyen.com/ https://checkoutshopper-live.adyen.com/ https://www.google.com/ https://api.usercentrics.eu https://app.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://calendar.google.com *.klaviyo.com *.paypal.com *.doubleclick.net https://www.googletagmanager.com/ https://www.facebook.com *.kameleoon.com *.stripe.com *.adyen.com https://calendar.google.com https://calendar.app.google;   connect-src     'self'  *.stickerapp.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com d6ce0no7ktiq.cloudfront.net *.fileapp.xyz *.fileapp.io *.google-analytics.com *.googlesyndication.com *.google.com fileapp-develop-eu-north-1.s3.eu-north-1.amazonaws.com fileapp-eu-north-1.s3.eu-north-1.amazonaws.com fileapp-eu-central-1.s3.eu-central-1.amazonaws.com fileapp-us-east-1.s3.us-east-1.amazonaws.com fileapp-us-west-1.s3.us-west-1.amazonaws.com fileapp-ap-southeast-2.s3.ap-southeast-2.amazonaws.com fileapp-ap-northeast-1.s3.ap-northeast-1.amazonaws.com https://api.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://aggregator.service.usercentrics.eu *.klaviyo.com *.paypal.com https://app.usercentrics.eu https://api.usercentrics.eu *.doubleclick.net *.crazyegg.com *.facebook.com https://graphql.usercentrics.eu https://googleads.g.doubleclick.net https://analytics.production.stickerapp.se *.google.se https://analytics.stickerapp.se https://graphql.usercentrics.eu/graphql https://analytics.production.stickerapp.no *.google.no https://analytics.stickerapp.no https://analytics.production.stickerapp.dk *.google.dk https://analytics.stickerapp.dk https://analytics.production.stickerapp.fi *.google.fi https://analytics.stickerapp.fi https://analytics.production.stickerapp.de *.google.de https://analytics.stickerapp.de https://analytics.production.stickerapp.fr *.google.fr https://analytics.stickerapp.fr *.google.jp https://analytics.stickerapp.jp https://analytics.production.stickerapp.es *.google.es https://analytics.stickerapp.es https://analytics.production.stickerapp.pt *.google.pt https://analytics.stickerapp.pt https://analytics.production.stickerapp.it *.google.it https://analytics.stickerapp.it https://analytics.production.stickerapp.nl *.google.nl https://analytics.stickerapp.nl https://analytics.production.stickerapp.co.uk *.google.co.uk https://analytics.production.stickerapp.pl *.google.pl https://analytics.stickerapp.pl https://analytics.stickerapp.co.uk https://analytics.production.stickerapp.ca *.google.ca https://analytics.stickerapp.ca https://bat.bing.com https://px.ads.linkedin.com *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.betterstack.com *.adyen.com https://api-js.datadome.co *.ingest.de.sentry.io;   font-src     'self' *.stickerapp.com fonts.gstatic.com d6ce0no7ktiq.cloudfront.net ddpc4jsx00pkd.cloudfront.net *.klaviyo.com *.typekit.net;   img-src     'self' data: blob: *.stickerapp.com *.stickerapp.de *.storyblok.com *.google.com *.google.se *.google.no *.google.fi *.google.dk *.google.ee *.google.nl *.google.de *.google.it *.google.pt *.google.pl *.google.co.uk *.google.es *.google.fr *.google.jp *.google.ca s3.eu-west-1.amazonaws.com s3-eu-west-1.amazonaws.com d6ce0no7ktiq.cloudfront.net ddpc4jsx00pkd.cloudfront.net d3k81ch9hvuctc.cloudfront.net *.adyen.com fileapp-develop-eu-north-1.s3.eu-north-1.amazonaws.com fileapp-eu-north-1.s3.eu-north-1.amazonaws.com fileapp-eu-central-1.s3.eu-central-1.amazonaws.com fileapp-us-east-1.s3.us-east-1.amazonaws.com fileapp-us-west-1.s3.us-west-1.amazonaws.com fileapp-ap-southeast-2.s3.ap-southeast-2.amazonaws.com fileapp-ap-northeast-1.s3.ap-northeast-1.amazonaws.com *.klaviyo.com *.paypal.com *.paypalobjects.com https://app.usercentrics.eu https://uct.service.usercentrics.eu connect.facebook.net *.facebook.com *.doubleclick.net *.crazyegg.com *.googletagmanager.com https://www.googleadservices.com https://bat.bing.com https://px.ads.linkedin.com *.kameleoon.io *.kameleoon.eu *.kameleoon.com;   object-src     'none';   script-src     'self' 'unsafe-inline' https://applepay.cdn-apple.com *.stickerapp.com https://app.storyblok.com *.google.com/recaptcha/ *.googletagmanager.com *.google-analytics.com *.googlesyndication.com *.gstatic.com/recaptcha/ www.paypal.com *.klaviyo.com https://www.googleadservices.com 'unsafe-eval' https://app.usercentrics.eu *.doubleclick.net connect.facebook.net *.facebook.com *.doubleclick.net *.crazyegg.com https://bat.bing.com https://snap.licdn.com *.kameleoon.io *.kameleoon.eu *.kameleoon.com *.betterstack.com *.stripe.com;   style-src     'self' 'unsafe-inline' https://app.storyblok.com *.stickerapp.com *.googleapis.com *.klaviyo.com *.typekit.net https://app.usercentrics.eu *.betterstack.com *.kameleoon.com;   base-uri     'self';   report-uri     https://api.stickerapp.com/log/csp_report;   report-to     csp-report-endpoint;   upgrade-insecure-requests
date: Wed, 13 Aug 2025 20:39:02 GMT
link: <./_app/immutable/assets/0.QuCwpEu6.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/componentsMap.CnK-m0Kc.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/StickerShopLayout.BqQlypSP.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/QuoteCard.DgY-iTHr.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/_page.Dr8FAw0y.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/CheckoutBlok.BzTkQKBB.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/Customer.DygquDbB.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/ChatPageSection.Dr7ESq_q.css>; rel="preload";as="style"; nopush, <./_app/immutable/entry/start.CtGaUpy1.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/98SzdRDZ.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DgDYOtVI.js>; rel="modulepreload"; nopush, <./_app/immutable/entry/app.7BDSzalo.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/C5qsylvU.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DVa1PeeL.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/C-jfq_Ww.js>; rel="modulepreload"; nopush, <./_app/immutable/nodes/0.D697L11g.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/CqVm_N4B.js>; rel="modulepreload"; nopush, <./_app/immutable/nodes/2.DmWAO6uG.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/D4FsBjec.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/C1lHFmnv.js>; rel="modulepreload"; nopush
referrer-policy: no-referrer-when-downgrade
set-cookie: stickerapp-jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhbm9ueW1vdXNVc2VySWQiOiJoeWZkbjc3a3FoNyIsInVzZXJJZCI6bnVsbCwiaWF0IjoxNzU1MTE3NTQyLCJleHAiOjE3NTUxMjgzNDIsImlzcyI6InN0aWNrZXJhcHAifQ.fP90wO49DBDMHBiHD4JUyAUF6Bj8136Mtoa_Bfql3hc; Path=/; Expires=Mon, 09 Feb 2026 20:39:02 GMT; HttpOnly; Secure; SameSite=Lax
x-content-type-options: nosniff
x-sveltekit-page: true
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 dc49f6715f580fc0c2984ea1fd7468b8.cloudfront.net (CloudFront)
x-amz-cf-pop: MRS53-P2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: R3QnunSYe7Ul7PAo8j0ga2KKyDLUF0Rm6X3g0FFIKfAvGmKViTD_vw==
strict-transport-security: max-age=31536000; includeSubDomains; preload