The ToolVault website is connected to 10 live Gumroad checkout URLs. Gumroad handles checkout and digital delivery for each paid product.
Paid source files should not be treated as protected merely because a button is hidden in HTML. Final protection requires server-side verification or a controlled delivery mechanism.
Netlify Functions can provide server-side endpoints and read secrets from environment variables. This is the architecture planned for the final deployment.