网站服务
1范围与用途
本说明适用于 cv404.tv 网站账户、作品展示、创作者资料、活动报名、免费 Token 申请和互动工具。我们使用你提供的信息完成登录、投稿审核、活动安排、资源分配和滥用防护。
2收集的信息
账户保存邮箱、昵称、用户编号和登录会话；验证码与会话凭据以校验摘要保存。作品保存封面、正文、版本和审核记录。资料保存你主动填写的介绍和联系链接。报名及 Token 申请保存表单内容、处理状态与审核意见；发放的供应商密钥加密保存。登录限流使用邮箱或 IP 的带密钥摘要。托管服务处理请求所需的网络信息。
3哪些内容会公开
通过审核的作品可公开浏览。创作者资料需要开启公开展示并审核通过；关闭展示立即生效。更新待审期间旧版可能继续公开。登录邮箱、待审正文、报名表、Token 申请和密钥不作为公开内容展示。全民榜只展示汇总结果；你主动分享的白板链接可被持有链接的人访问和转发。不要在希望公开的内容中填写他人隐私或密钥。
4浏览器存储与授权
登录使用必要的会话 Cookie，通常有效 30 天。语言、主题、白板和详细编辑器草稿保存在浏览器；手动投稿文字草稿保存在当前标签页的会话存储，可能由浏览器会话恢复功能恢复。清除浏览器数据会删除本地内容，不等于删除服务器账户。Agent 授权仅用于作品管理，通常有效 90 天，可在连接与安全页面撤销。
5服务提供方与外部链接
网站使用 Cloudflare 托管、数据库、分享存储及邮件服务。登录邮件会传送到你填写的邮箱服务。使用发放的模型 API 密钥时，你向相应供应商发出的请求由该供应商处理。打开作品、社交链接或导出到第三方平台后，相关处理适用接收方的规则。
6保留与删除
验证码有效 10 分钟；过期验证码、会话和登录限流记录由定时任务清理。未被作品版本引用且超过 30 天的封面会清理。账户、作品版本、申请和审核记录目前不会因退出登录而自动删除；其保留用于服务、历史审核和问题处理。公开隐藏不等于删除历史记录。匿名分享目前没有自助删除入口，可通过下方邮箱提供分享链接申请处理。
7访问、更正、导出与关闭账户
你可以在个人空间修改资料、关闭创作者主页、撤销 Agent 连接并申请作品下架。若需访问或导出服务器保存的个人信息、关闭账户或申请删除，请用账户邮箱联系下方地址并说明请求。我们会核验请求归属，说明可处理的范围及需要保留的记录。请勿在邮件中发送验证码、会话或 API 密钥。本服务暂未提供一键导出或删除账户功能。
Website services
1Scope and purposes
This notice covers cv404.tv accounts, projects, creator profiles, event applications, token requests and interactive tools. Information you provide is used for sign-in, moderation, event coordination, resource allocation and abuse prevention.
2Information processed
Accounts store email, nickname, user ID and sessions. Verification codes and session credentials are stored as verification digests. Projects store covers, content, revisions and moderation records. Profiles store introductions and links you choose to provide. Event and token requests store application fields, status and review notes; issued provider keys are encrypted. Login rate limits use keyed digests of email or IP. Hosting processes network information needed to serve requests.
3Public and private content
Approved projects are public. Creator profiles require visibility to be enabled and approval; turning visibility off takes effect immediately. A previous approved version may remain public during review. Login email, pending content, event applications, token requests and keys are not presented as public content. Rankings show aggregates. Board links you choose to share can be accessed and forwarded by anyone who has them. Avoid including other people’s private information or credentials in public content.
4Browser storage and authorizations
Sign-in uses an essential session cookie, normally valid for 30 days. Language, theme, boards and detailed editor drafts are stored in the browser. Manual submission text drafts use tab session storage and may be restored by browser session recovery. Clearing browser data removes local content, not your server account. Agent authorizations are scoped to project management, normally expire after 90 days and can be revoked in Connections & security.
5Service providers and external links
The website uses Cloudflare hosting, database, shared-board storage and email services. Login messages are delivered to the email service you specify. When using an issued model API key, requests you send to that provider are processed by the provider. External project links, social links and exports to other platforms are subject to the recipient’s rules.
6Retention and deletion
Codes expire after 10 minutes. Scheduled cleanup removes expired codes, sessions and login rate-limit records. Unreferenced project covers older than 30 days are cleaned up. Accounts, revisions, applications and audit records are not automatically deleted on sign-out; they support the service, moderation history and issue handling. Hiding public content does not erase history. Anonymous shares have no self-service deletion control; email the shared link to request handling.
7Access, corrections, export and account closure
Personal space lets you edit your profile, hide your creator page, revoke agent access and request project withdrawal. For access or export of personal information held on the server, account closure or deletion requests, contact the address below from your account email and describe your request. We will verify ownership and explain the scope of handling and any records that need to remain. Do not send codes, sessions or API keys by email. One-click server export or account deletion is not currently available.