EnableTrackingProtection

Configure Enhanced Tracking Protection in Firefox.

If this policy is not configured, tracking protection is not enabled by default in the browser, but it is enabled by default in private browsing and the user can change it.

Compatibility

Firefox	Firefox ESR	Firefox Enterprise
Available since 60	Available since 60	Available since 149

Cryptomining and Fingerprinting added in 70/68.2, Exceptions added in 73/68.5, EmailTracking added in 112, Category and SuspectedFingerprinting added in 142/140.2, BaselineExceptions and ConvenienceExceptions added in 145.

CCK2 Equivalent: N/A
OMA-URI: EnableTrackingProtection
Preferences Affected: privacy.trackingprotection.enabled, privacy.trackingprotection.pbmode.enabled, privacy.trackingprotection.cryptomining.enabled, privacy.trackingprotection.fingerprinting.enabled, privacy.fingerprintingProtection, privacy.trackingprotection.emailtracking.enabled, privacy.trackingprotection.emailtracking.pbmode.enabled, privacy.trackingprotection.allow_list.baseline.enabled, privacy.trackingprotection.allow_list.convenience.enabled

Examples

{
  "policies": {
    "EnableTrackingProtection": {
      "Value": true,
      "Locked": true,
      "Cryptomining": true,
      "Fingerprinting": true,
      "EmailTracking": true,
      "SuspectedFingerprinting": true,
      "Category": "strict",
      "Exceptions": [
        "https://example.com"
      ],
      "BaselineExceptions": true,
      "ConvenienceExceptions": true
    }
  }
}

JSON schema

{
  "type": "object",
  "properties": {
    "Value": {
      "type": "boolean"
    },
    "Locked": {
      "type": "boolean"
    },
    "Cryptomining": {
      "type": "boolean"
    },
    "Fingerprinting": {
      "type": "boolean"
    },
    "EmailTracking": {
      "type": "boolean"
    },
    "SuspectedFingerprinting": {
      "type": "boolean"
    },
    "Exceptions": {
      "type": "array",
      "items": {
        "type": "string",
        "format": "uri",
        "pattern": "^([Ff][Ii][Ll][Ee]://.*|[Hh][Tt][Tt][Pp][Ss]?://[^/]+/?)$"
      }
    },
    "Category": {
      "type": "string",
      "enum": [
        "standard",
        "strict"
      ]
    },
    "BaselineExceptions": {
      "type": "boolean"
    },
    "ConvenienceExceptions": {
      "type": "boolean"
    }
  }
}

Values

Value: a Boolean that enables or disables tracking protection.
- When true, tracking protection is enabled by default in both the regular browser and private browsing, and the Locked value determines whether or not a user can change it.
- When false, tracking protection is disabled and locked in both the regular browser and private browsing.
Locked: if set to true, users cannot change tracking protection values.
Cryptomining: a Boolean that controls blocking cryptomining scripts. When true, cryptomining scripts on websites are blocked.
Fingerprinting: a Boolean that controls blocking fingerprinting scripts. When true, fingerprinting scripts on websites are blocked.
EmailTracking: a Boolean that controls blocking email tracking. When true, hidden email tracking pixels and scripts on websites are blocked.
SuspectedFingerprinting: a Boolean that controls protection against suspected fingerprinting. When true, Firefox reduces the amount of information exposed to websites to protect against potential fingerprinting attempts.
Exceptions: an array of origins for which tracking protection is not enabled.
Category: a string that sets the tracking protection category, either strict or standard. When set, it overrides all other settings except Exceptions, BaselineExceptions and ConvenienceExceptions, and the user cannot change the category.
BaselineExceptions: a Boolean that controls the exceptions required to avoid major website breakage. When true, Firefox applies them automatically.
ConvenienceExceptions: a Boolean that controls the exceptions that are only required to fix minor issues and make convenience features available. When true, Firefox applies them automatically.

Windows (GPO)

Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Value = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Locked = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Cryptomining = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Fingerprinting = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\EmailTracking = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\SuspectedFingerprinting = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Exceptions\1 = "https://example.com"
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\Category = "strict" | "standard"
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\BaselineExceptions = 0x1 | 0x0
Software\Policies\Mozilla\Firefox\EnableTrackingProtection\ConvenienceExceptions = 0x1 | 0x0

macOS

<dict>
  <key>EnableTrackingProtection</key>
  <dict>
    <key>Value</key>
    <true/> | <false/>
    <key>Locked</key>
    <true/> | <false/>
    <key>Cryptomining</key>
    <true/> | <false/>
    <key>Fingerprinting</key>
    <true/> | <false/>
    <key>EmailTracking</key>
    <true/> | <false/>
    <key>SuspectedFingerprinting</key>
    <true/> | <false/>
    <key>Exceptions</key>
    <key>Category</key>
    <string>strict | standard</string>
    <array>
      <string>https://example.com</string>
    </array>
    <key>BaselineExceptions</key>
    <true/> | <false/>
    <key>ConvenienceExceptions</key>
    <true/> | <false/>
  </dict>
</dict>