Delta Link Livery Design Contest
Privacy Policy
Effective date: 8 October 2026
Operators: Delta Region Transit (DRT) and The Ryan Railroad (TRR). Privacy contact: privacy@deltalink.clivaro.io.
A Traditional Chinese translation follows for convenience. If the versions differ, the English version prevails.
1. Scope
This policy covers the Discord login app and the competition website. Discord information is used only as necessary to authenticate users, administer this competition and protect its integrity. The website is hosted on the official pages.dev address; deltalink.clivaro.io is used for email only.
2. Information processed
Discord login requests both identify and guilds.members.read. We process:
- Discord user ID, username and display name obtained through identity access.
- Member information returned by Discord for the specified official competition server, to verify membership. The current app stores a membership-status flag, not the full member profile.
- Session records, including a hashed session token and expiry time.
- Artwork, title, concept, credit name, material-source declarations and submission time.
- Voting records: voter Discord ID, selected entry and voting time.
- Information provided in support and privacy correspondence.
Hosting providers may process IP addresses, request information and technical logs to deliver and protect the service. We do not request your Discord password, email address through OAuth, private messages or payment information. The current login implementation uses a Discord OAuth access token temporarily during sign-in and does not store it in the app database.
3. Purposes and required information
We use information for sign-in, session management, account-level entry and voting limits, configured eligibility checks, entry review and display, competition administration, creator credit, necessary contact, abuse investigation and support or privacy requests.
Discord sign-in and required form fields are necessary for the corresponding features; without them, you cannot submit or vote through the website. Optional credit information may be omitted, with the applicable display-name fallback used instead. We do not sell Discord data, use it for advertising or use submissions or Discord information to train AI models.
4. Access and disclosure
Authorised DRT and TRR administrators may access information as needed. Discord provides authentication; Cloudflare Pages, Functions, D1 and R2 provide hosting, processing and storage. Information may be processed outside Hong Kong.
Approved entries may be displayed with their title, concept and credit name. Winning creators may be credited in announcements and on an in-game train badge. Discord IDs, session tokens and individual voting records are not intended for public display. Aggregate vote totals may be published under announced voting rules. Information may also be disclosed where required by applicable law.
5. Cookies and security
Essential cookies verify OAuth state and maintain login sessions. Blocking them may prevent sign-in. We use access controls and restricted storage for administrative records and unpublished files. No online service can guarantee absolute security.
6. Retention and deletion
Personal contact information used to communicate with a selected creator will be deleted after their livery is officially implemented and released in Delta Link. This includes private contact details and Discord identifiers retained solely for coordination, but not the agreed public credit name.
If a design is not selected, withdrawn or will no longer be implemented, contact information will be deleted once it is no longer needed for competition administration or outstanding disputes. It will not be kept indefinitely merely because implementation is delayed.
The agreed creator credit name and livery, including the implemented version, may be retained for attribution, in-game use, competition records and related publicity within the permissions granted by the Contest Terms. This does not permit retaining unrelated private contact information.
Login-session and identifiable voting records will be deleted or anonymised when no longer needed for authentication, vote verification, administration or dispute handling. They will not be retained merely because a livery has not been implemented. Sessions currently expire after seven days; expiry alone does not delete database records.
Deletion covers records under our control, including administrative exports and correspondence. Backup copies will be removed through their applicable deletion or rotation process and will not be restored for ordinary use. Providers' own records remain subject to their applicable policies.
Where law requires retention, only necessary information will be kept for that purpose and deleted when the requirement ends.
7. Your choices and requests
Contact privacy@deltalink.clivaro.io to request access, correction, deletion where appropriate or help ending a session. We may reasonably verify account control; never send passwords or recovery codes.
Removing information needed to administer an entry or vote may require its withdrawal. For an implemented design, we will explain any information that remains necessary. Revoking the app in Discord does not automatically remove stored records or necessarily end an existing website session.
8. Age requirements and changes
This service is not intended for anyone below Discord's applicable minimum age. Contact us about information collected from an ineligible child. Material policy changes will be announced on the website or official competition channels. General support: support@deltalink.clivaro.io.