Font protection
In Fountain, all files are protected and can’t be downloaded unless user is logged in to account and have valid order.
OTF and TTF
When files are uploaded, they are also stored in the Kirby content folder, but can’t be downloaded.
For extra protection, I also recommend a custom setup where you keep your content folder away from the web root, especially on a shared webhost. Read more here
Webfonts
All fonts are served as webfonts. There’s no conversion to base64 CSS files or anything similar. There are simple ways to protect from direct downloads, but it’s not enough if someone really wants your webfonts.
More info coming.