Privacy policy
Who is responsible for your data
Centro de Estudios Cinematográficos INDIE AC ("INDIE", "we"), with registered address at Carretera Xochimilco a San Pablo #2501, San Andrés Ahuayucan, Alcaldía Xochimilco, C.P. 16810, Mexico City, Mexico, is the data controller for the personal data collected through Cachephoto Magazine (cachephoto.com, the "Site"). For any privacy matter, write to daniel@indie.com.mx.
What we collect and how
We collect only what the magazine needs to operate:
- Download form: name, email (required), city, country, and phone/WhatsApp (optional, with the country code you choose).
- Account and sign-in: if you sign in with Google or Facebook, those platforms transmit your name, email and public profile/photo to us. For Facebook, this happens through our app "cachephoto publisher" (ID 1784023275939047), which receives only your email and public profile. If you sign in with an email magic link, we collect your email.
- Comments and profile: whatever you post and, if you add them, your social media handles, bio and photo.
- Browsing: we use Cloudflare's cookieless analytics, which gives us aggregate data (pages viewed, country, device type) that does not identify you individually.
We do not collect or process sensitive personal data (health, ethnic origin, beliefs, etc.), nor financial data.
Why we use your data
Primary purposes (necessary for the service you request):
- Giving you access to free downloads (RAW footage, LUTs, project files and similar).
- Operating your account, comments and public profile on the Site.
- Answering your requests and keeping the Site secure.
Secondary purposes (only with your consent, given by ticking the checkbox):
- Sending you materials, news and marketing communications from the magazine by email and — if you gave us your number — by WhatsApp.
You can decline the secondary purposes or withdraw your consent at any time (see "Withdrawing your consent") without losing access to downloads or your account.
Where your data is stored (international transfer)
Your data is stored in Supabase, which runs on Amazon Web Services infrastructure in the us-east-1 region (United States). This involves an international data transfer that is necessary to operate the Site. Supabase and AWS act as processors handling data on our behalf under their contractual security commitments. By providing your data and ticking the consent checkbox you accept this processing. We do not sell your data and we do not transfer it to third parties for their own purposes; we would only share it if required by law or a competent authority.
Signing in with Google and Facebook
The "Continue with Google" and "Continue with Facebook" buttons transmit data from those platforms to us (name, email and public profile). Google LLC and Meta Platforms, Inc. process your data under their own privacy policies (Google · Meta) and may use their own cookies on their domains during login. You can unlink our app from your Facebook account at any time and ask us to delete what we received: the steps are at Delete my data.
Your rights (ARCO) and how to exercise them
Under Mexican law you have the right to Access your data, Rectify it if inaccurate, Cancel it (have it deleted) and Object to its processing (the "ARCO" rights). To exercise any of them, write to daniel@indie.com.mx including:
- Your name and a way to reply to you (normally your email).
- Which right you want to exercise and over which data.
- Something that lets us confirm it is you (for example, writing from the registered email).
Under the Federal Law on the Protection of Personal Data Held by Private Parties (Official Gazette, March 20, 2025), we will communicate our determination within a maximum of 20 business days and, if applicable, make it effective within the following 15 business days. Exercising these rights is free of charge.
If our answer does not satisfy you, you may file a data protection request before the competent authority: the Secretaría Anticorrupción y Buen Gobierno (personal data portal), within 15 business days of our reply.
Withdrawing your consent
You can withdraw your consent for marketing communications at any time: use the unsubscribe link in our emails, or write to daniel@indie.com.mx. Withdrawal has no retroactive effects. To limit the use or disclosure of your data beyond unsubscribing, use the same contact.
Cookies and similar technologies
- Analytics: Cloudflare Web Analytics — cookieless, no individual tracking.
- Preferences and session: we use the browser's local storage (localStorage) to remember your theme (light/dark) and your signed-in session (Supabase Auth). These are not tracking cookies.
- Advertising: we use no advertising cookies or third-party trackers.
- Third-party login: Google and Facebook may use their own cookies on their domains during sign-in, under their policies.
Changes to this policy
Any change will be published on this page with a visible update date. If the change is substantial and we have your email, we will also notify you there.
Legal framework
This notice is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette (DOF) on March 20, 2025, and other applicable regulations. The competent authority is the Secretaría Anticorrupción y Buen Gobierno.