diff --git a/.gitignore b/.gitignore
index 2439cdd..fcbd3de 100644
--- a/.gitignore
+++ b/.gitignore
@@ -50,3 +50,11 @@ data/maxspeed/*.log
 
 # sensitive / personal
 duckdns_token_do_not_open.txt
+
+# secrets & runtime state (ne jamais committer)
+scripts/.webhooks
+scripts/.synbase
+scripts/.synstate
+scripts/.uptime-state
+scripts/.ipwatch-offset
+scripts/.ipwatch-state