Yotoplay.com - Us.yotoplay.com

age: 65718
cache-control: public,max-age=0,must-revalidate
cache-status: "Next.js"; hit
cache-status: "Netlify Edge"; fwd=stale
content-encoding: br
content-security-policy: default-src 'self' assets.gorgias.chat; base-uri 'none'; child-src 'self' blob: app.netlify.com netlify-cdp-loader.netlify.app; connect-src 'self' *.lottiefiles.com *.myshopify.com *.onetrust.com graphql.datocms.com test.aws.fooropa.com stockist.co *.stockist.workers.dev *.cloudfunctions.net bat.bing.com *.ip-api.com *.mapbox.com *.clarity.ms www.facebook.com *.doubleclick.net www.googletagmanager.com www.google-analytics.com analytics.google.com *.googleapis.com www.google.co.uk www.google.com analytics.tiktok.com *.yotoplay.com *.reviews.io adservice.google.com *.sentry.io *.amplitude.com ws: *.gorgias.chat *.gorgias.io api.gorgias.work storage.googleapis.com wss://us-east1-898b.gorgias.chat  *.analytics.google.com *.google-analytics.com *.maze.co rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com cdn.amplitude.com sdk.fra-02.braze.eu/ api.pennies.org.uk yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com ingesteer.services-prod.nsvcs.net heapanalytics.com c.us.heap-api.com *.contentsquare.net widget.trustpilot.com *.fastly.mux.com *.cfcdn.mux.com stream.mux.com *.abtasty.com; media-src 'self' blob: cdn.yoto.io cdn.shopify.com listen.radioking.com www.datocms-assets.com s3.radio.co *.gorgias.chat stream.mux.com *.fastly.mux.com *.cfcdn.mux.com; font-src 'self' data: fonts.gstatic.com *.gorgias.chat *.gorgias.io *.maze.co heapanalytics.com *.auryc.com cdn.shopify.com; form-action 'self' www.facebook.com yoto-media-api-prod-smart-cable-photos.s3.eu-west-2.amazonaws.com; frame-ancestors *.netlify.app; frame-src 'self' player.vimeo.com *.netlify.app widget.trustpilot.com support.yotoplay.com *.yotoplay.com https://www.googletagmanager.com td.doubleclick.net contact.gorgias.help yoto-support.gorgias.help www.google.com app.netlify.com netlify-cdp-loader.netlify.app *.maze.co www.facebook.com js.stripe.com www.youtube.com; img-src 'self' blob: data: 'unsafe-inline' www.datocms-assets.com dummyimage.com source.unsplash.com images.unsplash.com cdn.shopify.com *.onetrust.com *.blob.core.windows.net ssl.gstatic.com bat.bing.com stockist.co *.mapbox.com *.googleapis.com maps.gstatic.com *.clarity.ms www.facebook.com connect.facebook.net *.doubleclick.net www.googletagmanager.com www.google-analytics.com analytics.google.com www.google.com www.google.co.uk www.google.com.au www.google.ie *.gstatic.com *.quantcount.com *.quantserve.com picsum.photos *.picsum.photos *.maze.co *.tvsquared.com *.demdex.net contact.gorgias.help www.google.com *.gorgias.chat *.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work appboy-images.com braze-images.com cdn.braze.eu s3-eu-west-1.amazonaws.com/penniesfoundation/charities/000000-150.png s3-eu-west-1.amazonaws.com/penniesfoundation/charities/20000073-150.png heapanalytics.com *.contentsquare.net editor-assets.abtasty.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' bat.bing.com *.onetrust.com *.clarity.ms *.mountain.com www.facebook.com connect.facebook.net tagmanager.google.com widget.trustpilot.com www.googletagmanager.com www.google-analytics.com *.googleapis.com cdn.jsdelivr.net stockist.co *.stockist.co *.cloudflare.com www.googleoptimize.com *.yotoplay.com googleads.g.doubleclick.net www.dwin1.com analytics.tiktok.com the.sciencebehindecommerce.com app.backinstock.org *.quantcount.com *.quantserve.com polyfill.io snippet.maze.co snap.licdn.com *.amplitude.com app.netlify.com netlify-cdp-loader.netlify.app netlify-rum.netlify.app *.maze.co www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.eu rum.browser-intake-datadoghq.com js.sentry-cdn.com browser.sentry-cdn.com *.tvsquared.com js.go2sdk.com flackr.github.io js.appboycdn.com contact.gorgias.help/api/contact-forms/loader.js *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com js.stripe.com/v3 js.stripe.com/v3/fingerprinted/* https://js.stripe.com/v3/fingerprinted/js/embedded-checkout-outer-e5064220e674a4bc7ec61e3c563354eb.js https://js.stripe.com/v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js heapanalytics.com cdn.heapanalytics.com cdn.us.heap-api.com t.contentsquare.net contact.gorgias.help www.google.com config.gorgias.chat assets.gorgias.chat config.gorgias.io us-east1-898b.gorgias.chat storage.googleapis.com api.gorgias.work www.google.com www.gstatic.com cdn.logwork.com flackr.github.io try.abtasty.com; style-src * 'self' data: 'unsafe-inline' www.datocms-assets.com tagmanager.google.com fonts.googleapis.com heapanalytics.com blob: try.abtasty.com; worker-src 'self' blob:; report-uri https://o219359.ingest.sentry.io/api/4505918023008256/security/?sentry_key=2ac3cae6afd61d8a2d6e49621c07025f; report-to csp-endpoint;
content-type: text/html; charset=utf-8
date: Thu, 21 Nov 2024 09:09:02 GMT
etag: "6oij3xbcua8a8h-df"
netlify-vary: header=x-nextjs-data|x-next-debug-logging,cookie=__prerender_bypass|__next_preview_data
referrer-policy: origin-when-cross-origin
server: Netlify
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: DENY
x-nextjs-date: Thu, 21 Nov 2024 09:09:02 GMT
x-nf-request-id: 01JD6ZPTH6DMY86Z5928D7KV45
x-powered-by: Next.js
x-xss-protection: 1; mode=block
content-length: 40575