Font protection

In Fountain, all files are protected and can’t be downloaded unless user is logged in to account and have valid order.

OTF and TTF

When files are uploaded, they are also stored in the Kirby content folder, but can’t be downloaded. For extra protection, I recommend a custom setup where you keep your content folder away from the web root, especially on a shared webhost. Read more here

Webfonts

All fonts are served as webfonts, the backend converts to WOFF2 using fontTools. No base64‑encoded CSS files or similar tricks are employed. While basic measures can to protect from direct downloads, it’s not enough if someone really wants your webfonts. Keep this in mind before deciding whether Fountain is the right tool for you.