Privacy and hardening
What Peppermint turns off, locks down and blocks by default.
Peppermint is private by default. Telemetry is stripped out, and preferences are hardened so you do not have to hunt through settings.
Disabled by default
- Telemetry and health report uploads
- Studies and experiments
- Sponsored shortcuts and suggestions
Hardened preferences
Peppermint applies a hardened user.js baseline, informed by LibreWolf and arkenfox. A few examples:
// Telemetry & studies (disabled)
"datareporting.healthreport.uploadEnabled": false,
"toolkit.telemetry.enabled": false,
"app.shield.studies.enabled": false,
// Privacy (strengthened)
"network.cookie.cookieBehavior": 4,
"privacy.trackingprotection.enabled": true,
"dom.security.https_only_mode": true,
// Performance
"browser.sessionstore.interval": 120000,
"config.trim_on_minimize": true,Built-in protection
- Ad and tracker blocking
- Cookie-popup refusal
- Temporary permissions
- Ghost Mode: open a hardened private Ghost Window from the toolbar
Reporting a vulnerability
Please report security issues privately by following the security policy in the repository.