The ToolVault website is connected to the 10 live Gumroad checkout URLs. Gumroad handles the checkout and digital delivery for each paid product.
Paid source files should not be treated as protected merely because a button is hidden in HTML. Final protection requires server-side verification or a controlled delivery mechanism.
Netlify Functions can provide server-side endpoints and can read secrets from environment variables, which is the architecture planned for the final deployment.