diff --git a/pkgs/applications/networking/browsers/firefox/common.nix b/pkgs/applications/networking/browsers/firefox/common.nix
index adf04c424aa..51307272db2 100644
--- a/pkgs/applications/networking/browsers/firefox/common.nix
+++ b/pkgs/applications/networking/browsers/firefox/common.nix
@@ -13,19 +13,30 @@
 
 ### optionals
 
+## optional libraries
+
 , alsaSupport ? true, alsaLib
 , pulseaudioSupport ? true, libpulseaudio
 , ffmpegSupport ? true, gstreamer, gst-plugins-base
 , gtk3Support ? true, gtk2, gtk3, wrapGAppsHook
 
-, webrtcSupport ? true
-, geolocationSupport ? true
+## privacy-related options
+
+, privacySupport ? false
+
+# WARNING: NEVER set any of the options below to `true` by default.
+# Set to `privacySupport` or `false`.
+
+, webrtcSupport ? !privacySupport
+, geolocationSupport ? !privacySupport
 , googleAPISupport ? geolocationSupport
 , crashreporterSupport ? false
 
 , safeBrowsingSupport ? false
 , drmSupport ? false
 
+## other
+
 # If you want the resulting program to call itself "Firefox" instead
 # of "Nightly" or whatever, enable this option.  However, those
 # binaries may not be distributed without permission from the