Privacy & cookie policy

Sinatra takes your privacy seriously. This page explains, in plain language, what data this website processes, why, and what you can do about it. It covers the website only — not what happens when you visit us at the bar.

Who is responsible?

The controller for this website is Sinatra, Mechelsestraat 67, 3000 Leuven, Belgium. You can reach us on +32 16 79 46 46 or at info@sinatraleuven.be.

What this website does and does not do

This site is a shop window: our drinks list, photographs of the room, our opening hours and our contact details. There is no booking system, no contact form, no newsletter and no customer account. You cannot leave a name, an email address or a phone number here, and we do not ask for one.

What is processed comes down to two things: the technical information your browser sends automatically with every visit (including your IP address), and — only if you explicitly agree to it — anonymous visitor statistics.

Cookies

On a first visit this website sets no cookies at all as long as you do not click anything. Something is only stored on your device once you make a choice in the cookie notice, or once you switch language yourself.

Necessary cookies (no consent required):

• cc_cookie — records the choice you made in the cookie notice, so we do not have to ask again on every visit. It contains only that choice, no information about you. Lifetime: 182 days. Set by this website itself.
• NEXT_LOCALE — remembers whether you prefer the site in Dutch or in English, so your next visit starts in the right language. It is only set at the moment you click the other language yourself. Lifetime: 1 year. Set by this website itself.

Analytics cookies (only after your consent):

• _ga — gives your browser a random number so Google Analytics can tell returning visitors from new ones. Lifetime: 2 years. Set by Google.
• _ga_… — keeps track of the current visit (the part after the underscore is the number of our measurement property). Lifetime: 2 years. Set by Google.
• If we ever use Google Tag Manager, further Google cookies may appear depending on the tags configured (such as _gid, _gat or _gcl_…). Those fall entirely under the analytics category too, and are likewise only set after your consent.

This is not a vague promise to "respect your choice": for as long as you have not accepted analytics, Google's script is not even loaded. No request goes out to Google, so there is nothing to measure with.

Changing or withdrawing your choice

At the bottom of every page there is a "Cookie preferences" link. It reopens the same panel, and lets you turn analytics on or off at any time. If you turn it off, the site immediately deletes the Google cookies that had been set and measurement stops there and then.

You can of course also delete or block cookies yourself in your browser settings. If you block everything, this site keeps working — you will simply see the cookie notice again on every visit.

On what legal basis?

The two necessary cookies do not require consent: they are needed to deliver what you asked for yourself — showing the site in your language, and honouring your cookie choice. We rely on our legitimate interest in offering a functioning website (Article 6(1)(f) GDPR).

For the analytics cookies we rely solely on your consent (Article 6(1)(a) GDPR). You may withdraw it at any time; doing so does not affect the lawfulness of processing carried out before the withdrawal.

The technical logs kept by our hosting provider are processed on the basis of our legitimate interest in keeping the website available and secure (Article 6(1)(f) GDPR).

Who processes your data for us?

This website runs on a small number of service providers, acting as processors:

• Vercel Inc. — hosts the website. Vercel keeps technical logs, including your IP address, in order to deliver and secure the site. See their privacy policy.
• Supabase Inc. — provides the database holding our texts, and the storage holding the photographs and the PDF menu. Our project sits in a data centre in Ireland. Because your browser fetches the photographs from that storage directly, your IP address reaches it. See their privacy policy.
• Google Ireland Limited — provides Google Analytics, and therefore only once you have accepted the analytics cookies. See how Google uses data from websites and their privacy policy.

We do not sell your data, we do not rent it out, and we do not use this site for advertising or profiling.

Transfers outside the European Economic Area

Vercel, Supabase and Google are companies with a US parent. Even though the servers we use are in the European Union, data may in some cases be transferred to the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, on the EU–US Data Privacy Framework.

How long do we keep data?

• Cookies: as long as stated per cookie above, unless you delete them sooner yourself.
• Statistics in Google Analytics: for the retention period configured in our Google Analytics account, capped at 14 months for user-level data.
• Technical logs at our hosting provider: a limited period, for security and troubleshooting.

Your rights

The GDPR gives you a number of rights. You can ask us to:

• give you access to the data we process about you;
• correct data that is wrong;
• erase your data;
• restrict the processing;
• object to processing based on legitimate interest;
• transfer your data in a common format;
• withdraw a consent you gave earlier.

You can exercise those rights by emailing info@sinatraleuven.be. In all honesty: because this website collects no names, email addresses or accounts, we rarely hold anything that would let us identify you as an individual. Where that is the case we cannot act on a request for access or erasure, and we will tell you so.

If you are unhappy with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels — gegevensbeschermingsautoriteit.be.

Changes to this policy

If anything changes in how this website processes data — a booking system, a newsletter or an embedded map, for instance — we will update this text. The current version always lives on this page.

Last updated: August 2026.