diff --git a/server.js b/server.js
index 697621bff..1859d268d 100644
--- a/server.js
+++ b/server.js
@@ -42,6 +42,9 @@ app.use(nonDebugOnly(helmet({
       objectSrc: [`'none'`],
       manifestSrc: [`'self'`]
     }
+  },
+  referrerPolicy: {
+    policy: 'no-referrer'
   }
 })))