They’re bound to http Referrer iirc