diff --git a/.gitignore b/.gitignore
index 8c57f52..1672df9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -24,3 +24,11 @@ backend/cmd/mcpspike/mcpspike
 
 # Claude Code session-local runtime state
 .claude/*.lock
+
+# Garmin token stores hold live OAuth tokens -- never track them.
+backend/.garmin/
+# SQLite sidecar files
+*.db-shm
+*.db-wal
+# IDE state beyond the shared bits already ignored above
+.idea/