Protection works in layers rather than as a single lock. Content is encrypted behind the paywall with no free streaming tier, so only fans who bought it can play it.
During the exclusive window
DRM and watermarking are applied, and downloads stay off. Streaming-only is the common setting while tracks are still exclusive, which keeps files off devices and out of circulation.
Your call, always
Download and DRM settings are always the artist's and label's call, and EVEN never overrides them. Streaming-only is common during the early window, downloads can open later in the campaign with fan libraries updating automatically, and DRM or DRM-free is your choice. Downloads are delivered as MP3, with the WAV masters you supply compressed for streaming playback.
Purchase authentication
Every account verifies with a one-time code, and every purchase runs Stripe authentication, card fingerprinting, reCAPTCHA, and email verification. One transaction per fan is enforced, which keeps the music with real fans rather than with resellers and keeps reported sales clean.
If something surfaces
Takedown tracking runs on campaigns and your EVEN team coordinates removals.
Presales
The same principle applies to tour codes: authenticated signups, one unique code per verified fan, delivered privately by text and email. Clean-sale mechanics are the point of the design, and bots and brokers can't scrape what was never published.