Stops automated clones and records every licensed copy. It cannot stop someone rebuilding your site by hand.
A clone license permits copying the requested path’s design, structure, code or content into a new site or app. Each payment covers one request and path; it does not buy the whole site. Shield refuses clone requests; watch mode serves free without issuing licenses.
Request and license records are retained for 180 days, hidden from every view after expiry and deleted by daily cleanup. Totals cover that retention window. Save receipts and CSV exports for longer legal records; signed receipts remain independently verifiable after deletion.
IPs are personal data. We store only a truncated IPv4 /24 or IPv6 /64 prefix and a site-scoped, secret-salted HMAC hash, never a full IP in request records. Short-lived abuse counters identify clients only by hashes. We also store the requested path without query strings, bounded user agent, agent name and presented signing key ID, license tier, payer wallet, amount, network, settlement, time and receipt ID.
Payer addresses come from the verified payment. Agent names and key IDs are presented claims; HTTP agent signatures are not verified here. A marker links text to a request or receipt, never to a person’s name. Markers may be removed; scripts, styles and binary assets are preserved without text markers.
Only the site owner can read its evidence. Buyers prove control of an EOA payer wallet with a single-use, five-minute signature to see their licenses across this Worker’s sites; wallet addresses or presented agent keys alone do not grant access. Contract-wallet authentication and shared registries across separate deployments are not supported.