There are a few other Cache-Control directives besides private. Here are a few of them:

no-store – If you mark a page as no-store, it means it will not be stored anywhere—not on the M-Business Sync Server's shared cache; not on the client cache. To be honest, the only time you would want to use the no-store directive is if you were using the non-caching, 1x1 transparent GIF trick described below in the Frequently Asked Questions.

no-cache – At first glance, this seems like the obvious header to include when you do not want something to cache. But it is not. What no-cache actually does is force the server to check with the origin server that the document is still valid (it is somewhat like giving it a max-age of 0), but it might not refresh the content for each different user. So if you have personalized content that you do not want to be cached on our server, do not use no-cache. Use private instead.