Licence panel

Paid orders clear themselves — the server re-checks this list against NOWPayments every few minutes, so a lost webhook no longer means a lost sale. “Check now” runs that immediately. Unpaid orders drop off after 48h and the buyer is emailed that they can order again.
“Mark paid” runs the exact same flow a confirmed crypto payment does: it mints the licence, emails it to the buyer, and attaches it to their account.

Delete removes the account, its sessions and its support tickets. Licences are detached, not destroyed — the key keeps working on the machines it is already on and can be redeemed again on a new account. That is what you want when someone is changing email address.
Delete + revoke kills their keys on the way out: the client stops renewing within a day and the download link is refused. Use this one for refunds, chargebacks and abuse.
Orders are never deleted — they are the record of the sale. They keep the email and the licence key, they just stop pointing at an account that no longer exists.

Waiting for you is the real queue: the newest message in the thread is the customer's and it isn't closed. A thread you answered and they came back on counts as waiting again, which the status column on its own cannot tell you. It runs oldest first — whoever has been waiting longest is at the top, and stays on screen if the list has to be cut short.
Your reply is emailed to the customer — nothing else tells them one exists — and appears in their account under Support as “Support”. Untick Email the customer to leave yourself a note on the thread instead; the customer still sees it, so it is not a private note.

A listed address gets a blank 404 on every API call — sign-up, sign-in, checkout, licence activation, the visit beacon. No message and nothing that says they were singled out; the site simply stops working for them.
The marketing pages are static HTML on another host, so this cannot 404 them from here. The site's own script notices the refused beacon and blanks the page, which is cosmetic and skippable — the enforcement that matters is on this server.
This panel, /admin/* and /healthz are never blocked, so blocking your own address by mistake can always be undone from here.