MemoryLane screenshots your screen and makes it queryable via AI. All local. But it sees everything — banking, DMs, password managers.

We added a blacklist coordinator that checks four rules on every window-focus event:

- App name (1Password, Signal) — normalized across .app, .exe, bundle IDs

- Window title wildcards (*bank statement*)

- URL patterns (*://*.bank.com/*)

- Incognito auto-detection (on by default, zero config)

When anything matches, capture pauses and queued frames get flushed. Switch away, it resumes.

Surprising part: the matching logic was trivial. The annoying work was cross-platform app name normalization and making the settings UX simple enough that people actually configure it.