Export a log a stranger can read

  • Account email or user ID that matches checkout.
  • First successful login or download after payment, with UTC time.
  • IP or device for that event.
  • The email that carried the license key or magic link, with timestamp.

A raw JSON dump is a poor exhibit. A one-page table with four columns is better. If they never logged in, say so and rely on the delivery email and terms — do not fabricate an access event.