There are several, depending on your level of paranoia, you may want to only change a few or go deep into the rabbit hole. Basically when you install waterfox, you should first check the regular settings, for example, strict enhanced traffic protection in the privacy and security tab is a good start, there are more in other tabs that you can navigate quite easily and are pretty straightforward.

In about:config, one of the most important is geo.enabled, this one should definitely be set to false, it’s even recommended on the arch Linux wiki. You can also set both privacy.fingerprintingProtection and privacy.resistFingerprinting to true (the second one will, among other things, set your local clock static at UTC 0, so the payload you send out will always show UTC timezone, wherever you are). However, keep in mind that the second one will also break some websites that you’ll visit as well as slowing down your browsing experience a bit.

In the end it’s always a trade off between privacy and convenience, so you can explore and see the config that works best for your particular case.

The repo has a CLAUDE.md brother