How Downloads Work
Unlike ordinary marketplaces that expose raw file URLs, Devlio uses a Cryptographically Signed Download Token Architecture. Direct file links are never exposed to public scrapers or search bots.
Access Verification
When you click Download on any project or from My Licenses, Devlio confirms your purchase record or active license grant.
Token Generation
The server generates a unique, time-limited token tied to your user session and the latest approved project version.
Secure Stream
The ZIP package streams securely to your machine. The token expires automatically after 24 hours.
License Types & Vault
All your purchases and free grants are permanently tracked in your personal vault at /profile/licenses:
| License Badge | Origin | Re-download Access |
|---|---|---|
| Polar Paid | Purchased via Polar (Card / Apple Pay / Google Pay) | Unlimited lifetime re-downloads & all future updates |
| Asiacell Paid | Purchased via local Asiacell Cash transfer | Unlimited lifetime re-downloads & all future updates |
| Creator Granted | Granted directly by the project owner | Active until revoked by project owner |
| Free Project | Open project published on Devlio | Direct download available anytime |
Re-downloading Anytime: You never need to purchase a project twice. If you lose your local files or need to download an update on a new machine, simply visit My Licenses and click Download.
Download Rate Limiting
To protect creators against automated scraping and bandwidth abuse:
- Authenticated users are limited to 30 token generations per hour.
- Single-file downloads are throttled per IP to prevent DDoS attacks on backend storage.