Last updated: 3 August 2026
1. Controller
Cenote Scout is a project operated by LIBERA Studio from Mérida, Yucatán, Mexico. For privacy matters, contact hola@liberastudio.tech or send a message via WhatsApp.
This notice uses LIBERA Studio’s public details. The full legal name and detailed address must be professionally confirmed before noindex is removed.
2. Data we currently process
- Information you voluntarily send through WhatsApp or email: name, contact details, message content, evidence and relationship to a cenote or operator.
- Essential technical data that the hosting provider may log for security and operation, such as IP address, date, requested path, browser and error logs.
- Professional operator information needed to publish or verify a listing, when provided by the operator or obtained from a legitimate public source.
- Your cookie choice, stored for up to 180 days so we do not ask again on every visit.
- If you accept Analytics: a random identifier, viewed pages and actions, approximate location, and browser or device data processed through Google Analytics.
You do not need an account to browse the website. We do not request sensitive personal data.
3. Purposes
- Respond to enquiries, corrections and operator requests.
- Verify sources and keep the directory current.
- Prevent abuse, diagnose errors and protect the website.
- Handle personal-data rights requests.
We do not use information you submit for advertising or send promotional communications. Campaign measurement, when configured, will depend on your consent.
4. Providers, links and transfers
The website is hosted by Hostinger, uses Supabase as data infrastructure, loads interactive map data from OpenFreeMap and, only with your consent, uses Google Analytics and Google Tag Manager. When you contact us through WhatsApp, your communication is also subject to Meta/WhatsApp practices. Links to maps, social networks and operator websites are governed by those third parties’ policies.
Public iNaturalist data and images
The environmental pilot displays public data from iNaturalist and may load thumbnails from external infrastructure. When an image is requested, the provider may receive technical information such as the IP address, user-agent and requested URL. Each observation and photograph retains its individual authorship and licence, and links open a third-party platform.
Cenote Scout does not receive your iNaturalist credentials, does not publish observations on your behalf, and iNaturalist operates independently of Cenote Scout.
We do not sell personal data. We may disclose information to providers acting on our behalf when necessary to deliver or protect the service, or when required by law.
5. Retention
We retain messages and verification evidence while needed to handle the request, document a fact’s origin and resolve disputes. We review these records at least annually and delete or anonymise information that is no longer needed, unless the law requires retention.
6. Access, correction, deletion and objection rights
You may request access, correction, deletion or objection, revoke consent or limit the use of your information. Contact us by email or WhatsApp with your name, the right you wish to exercise, a clear description of the data and a reply channel. We may request reasonable information to verify your identity. We will communicate our decision within 20 business days, subject to the deadlines and extensions allowed by applicable law.
7. Cookies and analytics
The website stores a necessary preference to remember your choice. Google Analytics and Google Tag Manager load only after you accept Analytics. Meta Pixel is not configured or loaded at present. You may reject, accept or change your choice at any time through “Cookie preferences” in the footer.
See the Cookie policy for categories, providers and durations.
8. Changes to this notice
We will publish changes at this same address and show the updated date. Material changes will be communicated through a visible notice on the website.
This document was prepared with reference to Mexico’s current Federal Law on the Protection of Personal Data Held by Private Parties. The controller’s identity and address still need to be completed and professionally validated.
The website’s terms of use are explained in the Terms and conditions.