+
+Note that the tally endpoints have fully open `CORS <https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS>`_
+headers, so that they can be queried from anywhere; tally data is not sensitive,
+and this makes it significantly easier to query them from a web page.