This policy, "strict-origin-when-cross-origin" means, e.g. if a link is from https://example.com/?super_secret_param=sekrit https://example.com/?super_secret_pa

This policy, "strict-origin-when-cross-origin" means, e.g. if a link is from https://example.com/?super_secret_param=sekrit https://example.com/?super_secret_param=sekrit it will will have a *Referrer* header of https://example.com https://example.com. It doesn't actually mean Referrer is empty.