diff --git a/salt/salt/nginx/tildes-static-sites.conf.jinja2 b/salt/salt/nginx/tildes-static-sites.conf.jinja2
index f17c0ff..f9d94d7 100644
--- a/salt/salt/nginx/tildes-static-sites.conf.jinja2
+++ b/salt/salt/nginx/tildes-static-sites.conf.jinja2
@@ -10,7 +10,7 @@ server {
     add_header X-Content-Type-Options "nosniff" always;
     add_header X-Frame-Options "SAMEORIGIN" always;
     add_header X-Xss-Protection "1; mode=block" always;
-    add_header Referrer-Policy "same-origin" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 
     server_name {{ subdomain }}.tildes.net;
 
diff --git a/salt/salt/nginx/tildes.conf.jinja2 b/salt/salt/nginx/tildes.conf.jinja2
index c8a5120..45700b9 100644
--- a/salt/salt/nginx/tildes.conf.jinja2
+++ b/salt/salt/nginx/tildes.conf.jinja2
@@ -54,7 +54,7 @@ server {
     add_header X-Content-Type-Options "nosniff" always;
     add_header X-Frame-Options "DENY" always;
     add_header X-Xss-Protection "1; mode=block" always;
-    add_header Referrer-Policy "same-origin" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
 
     server_name {{ pillar['site_hostname'] }};