With 'Rewind' on my MacBook, I've been able to track all actionsMy private key or secret seed phrase was not stored on my device, adding to the mystification of this event.
I'm not a macbook user, are you referring to this app: rewind.ai? How does it work, how to make sure that this app also doesn't stalk your screen then feed it to the server?
The only notable event was connecting to MetaWin Dapp via Metamask.
Is it your habit to interact with the web3 app with the main wallet? That's another faux pas.
Who are the people around who are allowed to access your device?