Privacy Capabilities Overview

This page is auto-generated by etp_matrix.py. Pref defaults are sourced from StaticPrefList.yaml, all.js, and firefox.js (applied in that order). ETP Strict additionally enables features based on the browser.contentblocking.features.strict string in firefox.js.

Enhanced Tracking Protection (ETP)

Enhanced Tracking Protection features that change between Standard and Strict modes. For a quick overview of what each mode blocks, see Enhanced Tracking Protection in Firefox for desktop.

Users select their ETP mode in Firefox Settings, which is stored in the browser.contentblocking.category pref as "standard", "strict", or "custom". This page only tabulates the Standard and Strict presets. Custom has no preset of its own, it’s set by the individual user, either directly or automatically whenever a user or enterprise policy changes one of those prefs directly.

The Normal and Private columns indicate whether each feature is enabled in normal browsing and private browsing modes, respectively.

Note

An empty Private cell means the feature has no separate private browsing pref and inherits the value shown in the corresponding Normal cell.

Feature	Standard Normal	Standard Private	Strict Normal	Strict Private
Tracking Protection Blocks resources from domains on the Disconnect tracking protection list. privacy.trackingprotection.enabled: StaticPrefList.yaml privacy.trackingprotection.pbmode.enabled: StaticPrefList.yaml	false	true	true	true
Fingerprinting Blocking Blocks resources from domains on the Disconnect fingerprinting list. privacy.trackingprotection.fingerprinting.enabled: StaticPrefList.yaml, firefox.js	true		true
Fingerprinting Protection Applies fingerprinting protections including canvas randomization and reducing exposed system info. privacy.fingerprintingProtection: StaticPrefList.yaml privacy.fingerprintingProtection.pbmode: StaticPrefList.yaml	false	true	true	true
Cryptominer Blocking Blocks resources from domains on the Disconnect cryptomining list. privacy.trackingprotection.cryptomining.enabled: StaticPrefList.yaml, firefox.js	true		true
Social Tracker Blocking Blocks resources from domains on the Disconnect social tracking list. privacy.trackingprotection.socialtracking.enabled: StaticPrefList.yaml	false		true
Email Tracking Protection Blocks resources from domains on the email tracking list. privacy.trackingprotection.emailtracking.enabled: StaticPrefList.yaml privacy.trackingprotection.emailtracking.pbmode.enabled: StaticPrefList.yaml	false	true	true	true
Cookie Behavior Controls third-party cookie blocking strategy. network.cookie.cookieBehavior: StaticPrefList.yaml, firefox.js network.cookie.cookieBehavior.pbmode: StaticPrefList.yaml, firefox.js	5	5	Ci.nsICookieService.BEHAVIOR_PARTITION_FOREIGN	Ci.nsICookieService.BEHAVIOR_PARTITION_FOREIGN
Query Parameter Stripping Strips known tracking query parameters from URLs during navigation. privacy.query_stripping.enabled: StaticPrefList.yaml privacy.query_stripping.enabled.pbmode: StaticPrefList.yaml	false	false	true	true
Level 2 Tracking List Annotates channels with the Level 2 (strict) Disconnect tracking list in addition to Level 1. privacy.annotate_channels.strict_list.enabled: StaticPrefList.yaml	false		true
Strict Referrer Policy Prevents referrer policy from being relaxed to unsafe-url for cross-site requests. network.http.referer.disallowCrossSiteRelaxingDefault: StaticPrefList.yaml	true		true
Strict Referrer Policy (Top Nav) Applies strict referrer policy to top-level navigation (not just subresources). network.http.referer.disallowCrossSiteRelaxingDefault.top_navigation: StaticPrefList.yaml	false		true
Bounce Tracking Protection Clears state for sites used as bounce trackers. privacy.bounceTrackingProtection.mode: StaticPrefList.yaml	[1]		Ci.nsIBounceTrackingProtection.MODE_ENABLED
Local Network Access Blocking Blocks public websites from making requests to private IP ranges (RFC1918, loopback, link-local). network.lna.blocking: StaticPrefList.yaml network.lna.etp.enabled: all.js	true		true
Consent Manager Skipping Skips blocking for known consent management platform domains. Note: the value true unblocks domains in this category. privacy.trackingprotection.consentmanager.skip.enabled: StaticPrefList.yaml privacy.trackingprotection.consentmanager.skip.pbmode.enabled: StaticPrefList.yaml	false	true	false	false

Prefs tunable per Browsing Mode

Privacy-related prefs that have a dedicated private-browsing pref so they can be tuned separately for normal and private browsing modes.

Feature	Normal	Private
Opt-in Cookie Partitioning Changes cookieBehavior=5 from dynamic partitioning to block-by-default with opt-in. network.cookie.cookieBehavior.optInPartitioning: StaticPrefList.yaml network.cookie.cookieBehavior.optInPartitioning.pbmode: StaticPrefList.yaml	false	false
Global Privacy Control Sends Sec-GPC: 1 HTTP header and exposes navigator.globalPrivacyControl=true. privacy.globalprivacycontrol.enabled: StaticPrefList.yaml privacy.globalprivacycontrol.pbmode.enabled: StaticPrefList.yaml, firefox.js	false	true
Resist Fingerprinting Enables unsupported fingerprinting resistance, which could break websites. See privacy.fingerprintingProtection for the supported variant. privacy.resistFingerprinting: StaticPrefList.yaml privacy.resistFingerprinting.pbmode: StaticPrefList.yaml	false	false
Skip Anti-fraud Resources Exempts domains with ‘fingerprinting’ or ‘tracking’ annotations from blocking if they have ‘anti-fraud’ annotation. Note: the value true unblocks domains in this category. privacy.trackingprotection.antifraud.skip.enabled: StaticPrefList.yaml privacy.trackingprotection.antifraud.skip.pbmode.enabled: StaticPrefList.yaml	false	true

Prefs that affect all modes

Privacy-related prefs that don’t not have a dedicated private-browsing pref.

Feature	Value
Malware Protection Checks URLs against Google Safe Browsing malware list. browser.safebrowsing.malware.enabled: StaticPrefList.yaml	true
Phishing Protection Checks URLs against Google Safe Browsing phishing list. browser.safebrowsing.phishing.enabled: StaticPrefList.yaml	true
Downloads Protection Checks downloaded file hashes against Google Safe Browsing download protection lists. browser.safebrowsing.downloads.enabled: all.js	true
Block Potentially Unwanted Software Blocks downloads flagged as potentially unwanted programs (PUPs) by Safe Browsing. browser.safebrowsing.downloads.remote.block_potentially_unwanted: all.js	true
Reset Private Browsing Shows a toolbar button in private windows that restarts the private session, clearing all site data and closing all private tabs and windows. browser.privatebrowsing.resetPBM.enabled: firefox.js	true
Show Reset Confirmation Shows a confirmation dialog before the private browsing session is restarted. browser.privatebrowsing.resetPBM.showConfirmationDialog: firefox.js	true
CHIPS Support Enables Cookies Having Independent Partitioned State (CHIPS) per draft spec. network.cookie.CHIPS.enabled: StaticPrefList.yaml	true
Social Tracker Cookie Blocking Treats domains on social tracking list as trackers for cookie blocking. privacy.socialtracking.block_cookies.enabled: StaticPrefList.yaml	true
Do Not Track Sends DNT: 1 HTTP header with all requests. privacy.donottrackheader.enabled: StaticPrefList.yaml	false
Strip on Share Strips tracking query parameters when copying URLs via context menu ‘Copy Link’. privacy.query_stripping.strip_on_share.enabled: StaticPrefList.yaml, firefox.js	true

---

[1]

privacy.bounceTrackingProtection.mode has build-specific defaults:

#ifdef NIGHTLY_BUILD
  value: 1
#else
  value: 3
#endif