supervalu.ie

Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Set-Cookie: __uzma=292c8b56-010a-432a-9af2-00b849ef1ce6; HttpOnly; path=/; Expires=Sun, 29-Nov-26 15:54:27 GMT; Max-Age=15724800; SameSite=Lax, __uzmb=1780242867; HttpOnly; path=/; Expires=Sun, 29-Nov-26 15:54:27 GMT; Max-Age=15724800; SameSite=Lax, __uzme=9366; HttpOnly; path=/; Expires=Sun, 29-Nov-26 15:54:27 GMT; Max-Age=15724800; SameSite=Lax, __uzmc=734201096110; HttpOnly; path=/; Expires=Sun, 29-Nov-26 15:54:27 GMT; Max-Age=15724800; SameSite=Lax, __uzmd=1780242867; HttpOnly; path=/; Expires=Sun, 29-Nov-26 15:54:27 GMT; Max-Age=15724800; SameSite=Lax, ADRUM_BT=R%3A0%7Cg%3A1b8b8c9c-b581-44d8-8f96-6ba5ef94b8530%7Cn%3Amusgrave-prod_701446f2-e788-4efd-9621-154eba0c71ce%7Ci%3A749848%7Ch%3Ae%7Ce%3A38; expires=Sun, 31 May 2026 15:54:57 GMT; Max-Age=30; path=/; secure
Date: Sun, 31 May 2026 15:54:27 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff, nosniff
X-Onyx-From-Cache: 1
Cache-Control: max-age=0
Expires: Sun, 31 May 2026 15:54:27 GMT
Referrer-Policy: same-origin
Permissions-Policy: geolocation=(self),camera=(), display-capture=(), web-share=*
Content-Security-Policy: frame-ancestors         'self'         4396925.fls.doubleclick.net         www.google.co.uk         www.google.com         www.google.ie         www.google.nl         www.googletagmanager.com;     default-src         'self'         'unsafe-eval'         'unsafe-inline'         *.clarity.ms         *.mypurecloud.com         *.mypurecloud.ie         4396925.fls.doubleclick.net         ad.doubleclick.net         adservice.google.com         ajax.aspnetcdn.com         az416426.vo.msecnd.net         capi.supervalu.ie         cdn.appdynamics.com         cdn4.userzoom.com         connect.facebook.net         content.hotjar.io         cookie-cdn.cookiepro.com         data:         fonts.googleapis.com         fonts.gstatic.com         geolocation.onetrust.com         googleads.g.doubleclick.net         i.ytimg.com         identity-supervalu.api.prod.musgrave.io         identity.prod.musgrave.io         images.ctfassets.net         maps.googleapis.com         maps.gstatic.com         metrics.hotjar.io         p.clarity.ms         pdx-col.eum-appdynamics.com         player.vimeo.com         privacyportal.cookiepro.com         region1.analytics.google.com         region1.google-analytics.com         script.crazyegg.com         script.hotjar.com         stackpath.bootstrapcdn.com         static.hotjar.com         stats.g.doubleclick.net         supervalu-loyalty-web.api.prod.musgrave.io         supervalu-webchat.api.prod.musgrave.io         td.doubleclick.net         use.fontawesome.com         wss://streaming.mypurecloud.ie         wss://webmessaging.mypurecloud.ie         wss://ws.hotjar.com         www.clarity.ms         www.facebook.com         www.google-analytics.com         www.google.co.uk         www.google.com         www.google.ie         www.google.nl         www.googletagmanager.com         www.gstatic.com         www.youtube-nocookie.com         www.youtube.com;
X-UA-Compatible: IE=edge
X-Frame-Options: SAMEORIGIN
Access-Control-Allow-Origin: *
Content-Encoding: gzip