Sorry for the typo.
I was referring to the possibility of 3rd parties using an API (yours) where they can track if a user (lightning key?) has paid for a product (15 min VPN)