diff --git a/docs/privacy/anonymizing-your-mac-address.md b/docs/privacy/anonymizing-your-mac-address.md
index 7b9a53c..6b8b60b 100644
--- a/docs/privacy/anonymizing-your-mac-address.md
+++ b/docs/privacy/anonymizing-your-mac-address.md
@@ -51,6 +51,8 @@ wifi.scan-rand-mac-address=yes
 wifi.cloned-mac-address=stable
 ethernet.cloned-mac-address=stable
 connection.stable-id=${CONNECTION}/${BOOT}
+#use random IPv6 addresses per session / don't leak MAC via IPv6 (cf. RFC 4941):
+ipv6.ip6-privacy=2
 ~~~
 
 * `stable` in combination with `${CONNECTION}/${BOOT}` generates a random address that persists until reboot.