Referrer-Policy HTTP header
Currently, if someone clicks on an external link inside a survey, the website that link points to will get the survey address in the
Referer HTTP header.
It might be a good a idea to make Framadate return
Referrer-Policy: strict-origin so only the domain is sent and not the full survey URL.
(You can find more information about this header here.)