Clear-Site-Data header

"cache"

The server signals that the client should remove locally cached data (the browser cache, see HTTP caching) for the origin of the response URL. Depending on the browser, this might also clear out things like pre-rendered pages, script caches, WebGL shader caches, or address bar suggestions.

"clientHints" Experimental

Indicates that the server will remove all client hints (requested via Accept-CH) stored for the origin of the response URL.

Note: In browsers that support the "clientHints" data type, client hints are also cleared when the "cache", "cookies", or "*" types are specified. "clientHints" is therefore only needed when none of those other types are specified.

"cookies"

The server signals that the client should remove all cookies for the origin of the response URL. HTTP authentication credentials are also cleared out. This affects the entire registered domain, including subdomains. So https://example.com as well as https://stage.example.com, will have cookies cleared.

"executionContexts" Experimental

The server signals that the client should reload all browsing contexts for the origin of the response (Location.reload).

"prefetchCache"

Used to clear speculation rules prefetches that are scoped to the referrer origin.

"prerenderCache"

Used to clear speculation rules prerenders that are scoped to the referrer origin.

"storage"

The server signals that the client should remove all DOM storage for the origin of the response URL. This includes storage mechanisms such as:

• localStorage (executes localStorage.clear),
• sessionStorage (executes sessionStorage.clear),
• IndexedDB (for each database execute IDBFactory.deleteDatabase),
• Service worker registrations (for each service worker registration, execute ServiceWorkerRegistration.unregister),
• Web SQL databases (deprecated),
• FileSystem API data,
• Plugin data (Flash via NPP_ClearSiteData).

"*" (wildcard)

The server signals that the client should clear all types of data for the origin of the response. If more data types are added in future versions of this header, they will also be covered by it.

If a user signs out of your website or service, you might want to remove locally stored data, including any prefetched or prerendered content for speculated navigations. To do this, add the Clear-Site-Data header to the page that confirms the logging out from the site has been accomplished successfully (https://example.com/logout, for example):

Clear-Site-Data: "cache", "cookies", "storage", "executionContexts", "prefetchCache", "prerenderCache"

If this header is delivered with the response at https://example.com/clear-cookies, all cookies on the same domain https://example.com and any subdomains (like https://stage.example.com, etc.), will be cleared out.

Clear-Site-Data: "cookies"

If this header is delivered with the response at https://example.com/change-state.json, all speculated navigations prerenders on the same domain https://example.com and any subdomains (such as https://stage.example.com), will be cleared.

Clear-Site-Data: "prerenderCache"

To clear both prefetch and prerender speculations, both prefetchCache and prerenderCache must be sent:

Clear-Site-Data: "prefetchCache", "prerenderCache"

There are cases where clearing one or the other, or both, is appropriate.

For example, a client-side rendered application that pulls in data from JavaScript might use prerenderCache on state change to discard the prerendered pages, but keep the prefetched HTML to use when the page is rendered (or prerendered again).

On the other hand, if the prefetched HTML document contains stale data but the corresponding prerendered page is set up to refresh the data when it is displayed, you may not need to use prerenderCache but you probably will want to use the prefetchCache directive: so that the stale HTML isn't used in a future prerender.

Finally, if the prefetched HTML document contains stale data, and also does not refresh stale content on prerendered pages, then specifying both prefetchCache and prerenderCache is most appropriate.

• Cache-Control