proton.lock
What is it?
A small file the plugin creates in its own folder on first run. It holds the key that encrypts your auction data. Full detail is on The Installation Key.
Is proton.lock ever sent to us, or anywhere?
No. It is generated on your server and never leaves it. We never receive it and could not decrypt your data if we wanted to. The encryption is yours alone.
What happens if I lose it?
The encrypted auction data can no longer be read, the way a backup of an encrypted drive is useless without its password. Those auctions would effectively be gone. That is the one real risk, and it is why the file belongs in your backups. Losing it harms nothing else on your server.
Could someone steal it and read my auctions?
Only if they also took your database and had the access to your server to get both. On its own the file is useless, and it never travels anywhere to be intercepted. It is no more exposed than the database it protects.
Is it tied to my licence?
No. It is generated per installation and has nothing to do with your licence key. That is deliberate, so your data is never at the mercy of a licence being active.