The plaintiffs claimed that tracking pixels on waxcenter.com collected what visitors did, including booking appointments, and passed it to third parties such as Facebook and Google without consent, naming the federal wiretap law, Florida’s Security of Communications Act and California’s Invasion of Privacy Act. European Wax Center agreed to a class settlement of up to $5 million for US visitors between June 2023 and April 2026, which a Florida court approved in October 2026. It admitted no wrongdoing.
The case is Cumor and Dunn v. European Wax Center, Inc., in the Thirteenth Judicial Circuit Court of Hillsborough County, Florida. It was filed on 2 April 2026, the same day the court gave the deal its first approval. Final approval followed in October 2026.
The plaintiffs said the company placed tracking tools on waxcenter.com, including the Meta Pixel, cookies and other tags. They said these tools recorded what visitors did on the site, including booking an appointment, and sent it to third parties such as Facebook and Google, without the visitors agreeing. The claims relied on three wiretap laws: the federal Electronic Communications Privacy Act, Florida’s Security of Communications Act and California’s Invasion of Privacy Act, known as CIPA. None of these claims was tested at trial.
The fund is up to $5 million. It covers US residents who visited waxcenter.com, including anyone who booked online, between 30 June 2023 and 2 April 2026. People who sent in a claim form by 30 June 2026 share the net fund equally, at up to $10 each, less if more people claim. Kroll Settlement Administration runs the payments, which start once the approval is final and any appeals are over. European Wax Center admitted no wrongdoing.
There was no hack and no stolen data in this case. It was about ordinary marketing tags of the kind many brands run on booking and checkout pages. Wiretap claims like these are brought for every visitor in the class, which is how a few lines of tracking code can turn into a seven-figure settlement.
It is one of a run of cases about website tracking. In July 2025, California’s Attorney General announced a $1.55 million settlement with Healthline, alleging that its opt-outs for targeted advertising did not work.
The questions this case raises are simple to ask of any site: which tags load before a visitor makes a choice, whether they stop when someone says no or sends a Global Privacy Control signal, and whether a booking or checkout page sends more to ad platforms than the privacy notice says.