need to secure api tokens and sensitive data

Hey ,

I am a developer and whenever I want to make any api request I had to define the sensitive keys openly so how can i prevent them to not to be in code and also not to be on the github ,please help me with this , if you have any idea how can i decalre them privately across the website and catch it in my liquid code.

Thankyou.