The questions worth asking first.
The honest answers to the things every studio wants to know before they trust a licensing layer with their game — including the one most vendors won’t give you.
Is Bindseal piracy‑proof?
No — and we won’t tell you otherwise. Any protection that runs on a customer’s machine can be defeated with enough effort. What Bindseal does is raise the cost and time of cracking at each layer, and let you push the highest-value logic server-side, where patching the client doesn’t get an attacker that code. We document the real strength of every mode so you can make an informed call.
What happens to my customers if your servers go down?
Nothing they’d notice. Licenses are verified offline against an embedded public key, and any online checks fail open through a configurable grace window, so games keep running. Your game’s availability doesn’t hinge on ours — reachability is an optimization, not a requirement.
What happens when I stop paying?
Your already-shipped builds keep working. At the end of a contract we issue a signed, perpetual release grant that winds protection down cleanly, so the game your players paid for is never remotely bricked. It’s a defined exit, agreed up front.
Which languages and platforms are supported today?
The license server and a reference JavaScript/Node SDK are available now, with a documented wire format you can verify from any language. Native bindings for C++, C#, Rust and Swift are on the roadmap — and we’ll say plainly when each one is actually ready, not before.
Where is the signing key kept?
Your Ed25519 signing key lives in AWS KMS and never leaves the HSM — not us, not you, not disk. The server requests a signature over the canonical license bytes; the private key is never exported. Your game only ever carries the matching public key, which can verify but never forge.
Does the SDK phone home or track my customers?
Verification is fully offline, so nothing has to be sent anywhere for a license to work. Online checks — for seat counts or revocation — are opt-in, documented, and carry only what the check needs. We’ll never quietly turn your game into a telemetry pipe.