Sensitive-data tracking