I'll have to ask my friend about this...he was using SSL and had no referrers and they killed his account. He had no referrer policy tag. I know he was using a tracking script that he redirected traffic through as well, perhaps that was Http.