uBlock Origin: blocks ads
NoScript Security Suite: blocks content loaded from other domains
Privacy Badger: detects and fights attempts are cross-site user tracking
AdNauseam: randomly sends garbage data back to ad trackers
HTTPS Everywhere: uses SSL/TLS by default with sites known to support it
Decentraleyes: it replaces Google tracker-laden scripts with compatible, trackerless local versions
CanvasBlocker: alters JavaScript when attempts at fingerprinting your browser are detected
Privacy Settings: allows access to various privacy settings without needing to dive into about:config