Source Control

Beginner question here:

which files should not track with source control in my project that may have sensitive information?

What do you mean by sensitive information, sensitive user data that they input?