There is no prosecution. AFAIU, you’re simply denied access without payment. HTTP code 402 is „payment required“. You‘re basically buying an access token for one hour.
How is it enforced on the server side? I see no documentation regarding that. The only thing that is written down is that you get a superficial token and use that service as a front for accessing a public website. Again, am I missing something?