`Cache-Control`

Caching rules for browsers, proxies and CDNs.

Request and response header caching

How it works

no-store forbids storing; no-cache stores but revalidates first; private keeps it out of shared caches; max-age sets freshness in seconds. Responses with personal data should be private or no-store.

Example

Cache-Control: private, max-age=0, no-cache

See it live: send any request in Endpoint Client and open the Headers tab, where every response header is explained. Specification: RFC 9111.

Related headers

`Age`

Seconds the response has spent in a shared cache.

`Expires`

Absolute time after which the response is stale.

`Vary`

Request headers that change the response.