Peafox

🔥🦊 A Firefox user.js for the optimal balance between privacy, security and compatibility.

Contents

• Features
  • Key Features
  • Enhancing Features
• Installation
• Credits

Features

Key Features

• Disabled Mozilla telemetry
  • Default browser agent and default browser check are both off by default.
  • Users are opted out of Mozilla Studies and Experiments.
  • Data reporting and pings are disabled.
• Removed reliance on Google services
  • This includes disabling Safe Browsing
  • Uses Mozilla Location Services as geolocation provider instead of Google
• DNS-over-HTTPS is enabled by default (Firefox has begun adoption)
  • Default DoH provider is LibreDNS
• New Tab Page URL can be changed without extensions.
  • See the wiki.

Enhancing Features

General

• Pocket integration is disabled.
  • New Tab Page will not show Pocket stories either.
• Snippets and sponsored content is disabled.
• Downloads won't be saved to the Downloads directory automatically, users can choose where to save them.
• Cosmetic animations are turned off to improve performance.
• Recommended Extensions and Themes are disabled
• User agent can be changed in devtools

Network

• DNS and DNS provider changes (see above).
• Encrypted SNI is enabled
• HTTP/3 Support is enabled
• All predictors and prefetching is turned off.
• Third party cookies are blocked, first party cookies are allowed.
• Tightened Referrer header policy to stop tracking.
  • Referrer is only sent when full hostnames match.
  • Referrer will only contain scheme, host and port.
• Non-unicode domains are converted to Unicode to stop phishing
• HTTPS-only mode is enabled so no need for HTTPS Everywhere

Geolocation

• Geolocation provider is set from Google to Mozilla.
• Geo-specific search defaults are disabled.
• Disable using the OS's geolocation service.

Privacy

• Navigator values (buildID, platform, oscpu and appversion) are overridden to better protect against fingerprinting.
• Tracking elements are removed from URLs recommended by the browser.
• Onboarding and beacon are disabled.
• URLs are never trimmed and will always show the protocol.
• Crash reporting (breakpad) is disabled.
• Battery Status API which only serves as a fingerprintable detail, is disabeld.
• The "speculativeConnect" feature of the URL bar is disabled.
• Tracking Protection is set to strict.
  • Resists fingerprinting.
• URL bar suggestions of any kind are disabled.
• Autofill for forms, addresses and credit cards is disabled.
• Video statistics and Widevine (proprietary software by Google) are disabled.

Installation

1. Simply download user.js.
2. Visit about:support in Firefox to see your profile directory.
3. Copy user.js into your profile folder.

Credits

• Many hardening enhancements were taken from PrivacyTools.io and ghacks-user.js

BTC: bc1q72l5jtjcxlma8knwt80nwm5c9wccu45tt7y02g