diff --git a/hosts/common/desktop.nix b/hosts/common/desktop.nix
index 8097f0f..42d2fa9 100644
--- a/hosts/common/desktop.nix
+++ b/hosts/common/desktop.nix
@@ -37,6 +37,9 @@
       "media.peerconnection.enabled" = false;
       "geo.enabled" = false;
       "network.captive-portal-service.enabled" = false;
+      # Do Not Track : plus d'UI depuis les versions récentes de Firefox,
+      # mais le pref existe encore et envoie bien l'en-tête DNT=1.
+      "privacy.donottrackheader.enabled" = true;
     };
 
     policies = {
@@ -49,11 +52,27 @@
         Value = true;
         Locked = true;
       };
+
+      # DuckDuckGo est un moteur intégré à Firefox, pas besoin de l'Add.
+      SearchEngines.Default = "DuckDuckGo";
+
+      # Pubs/contenu sponsorisé sur le nouvel onglet et la barre d'adresse.
+      FirefoxHome = {
+        SponsoredTopSites = false;
+        SponsoredPocket = false;
+        Locked = true;
+      };
+      FirefoxSuggest.SponsoredSuggestions = false;
+
       ExtensionSettings = {
         "uBlock0@raymondhill.net" = {
           install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi";
           installation_mode = "force_installed";
         };
+        "jid1-MnnxcxisBPnSXQ@jetpack" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi";
+          installation_mode = "force_installed";
+        };
       };
     };
   };