The class action lawsuit claims that the chain’s website presents an illusion of privacy choice, but ignores user preferences behind the scenes to feed personal data to third-party tech companies. If you are a California resident who visited Papa John’s website and rejected non-essential tracking, your digital footprint may have been unlawfully intercepted, and you may be eligible to take legal action.
The complaint, Gershzon, et al. v. Papa John’s International Inc., was filed on April 24, 2026, in the U.S. District Court for the Northern District of California. It accuses the multi-billion-dollar pizza franchise of blatantly breaking consumer trust and violating state privacy frameworks. Rather than respecting the boundaries set by everyday people looking to order a meal without being tracked, the company is accused of treating its digital storefront as a continuous, unauthorized data-mining operation.
The Illusion of Consent on PapaJohns.com
Virtually all major e-commerce platforms utilize cookie consent banners to comply with modern privacy frameworks. When a user lands on Papa John’s website, they are met with a standard prompt giving them the clear option to either accept or reject non-essential cookies—such as those used for targeted marketing and analytics.
According to the lawsuit, this cookie consent banner is nothing more than a deceptive corporate facade. The plaintiffs allege that when a consumer clicks the option to “reject” or opt out of tracking, Papa John’s software deliberately bypasses that command. Instead of halting the tracking scripts, the company allegedly permits hidden, third-party cookies to execute on the user’s browser anyway, rendering the consumer’s privacy choice entirely meaningless.
Legal Violations: The California Invasion of Privacy Act (CIPA)
The core legal argument in the complaint rests on California’s Invasion of Privacy Act (CIPA), alongside other state consumer protection and false advertising statutes. CIPA strictly prohibits companies from deploying digital “wiretaps” or intercepting online communications without the express consent of all parties involved.
The lawsuit argues that by giving users an explicit button to opt out, Papa John’s made a binding representation that it would respect their digital boundaries. Disregarding that choice and allowing third-party trackers to vacuum up data anyway constitutes an illegal interception of communications under California law. Furthermore, the plaintiffs allege that this hidden data tracking gives Papa John’s an unfair commercial advantage by fueling its targeted advertising algorithms using unlawfully acquired data.
Who is Eligible to Join the Papa John's Privacy Lawsuit?
The proposed class action looks to represent a specific, protected class of online visitors who attempted to lock down their privacy settings.
You may be eligible to participate in this lawsuit if:
You are a resident of the state of California.
You visited the official Papa John’s website or digital ordering platforms.
You were presented with the cookie consent banner and explicitly clicked to opt out or reject non-essential cookies.
Your browsing data, device info, or website interactions were tracked or shared with third parties despite your opt-out.
Class action lawsuits provide a vital avenue for everyday citizens to stand up to corporate entities. If the court rules in favor of the consumers, the lawsuit could secure statutory financial damages for every individual whose privacy was violated, while forcing Papa John’s to implement permanent court injunctions to overhaul its website architecture and respect user cookie settings.
What You Should Do Next to Protect Your Online Privacy
Consumers do not have to wait for a judge to secure their digital footprints.
Utilize Browser-Level Blocking: Don’t rely solely on a website’s cookie banner. Use privacy-focused web browsers or install trusted browser extensions (like uBlock Origin or Privacy Badger) that automatically block third-party tracking scripts at the browser level.
Clear Existing Cookies: Go into your browser settings today and manually clear your historical cookies and cache to wipe any tracking identifiers that companies like Papa John’s may have already placed on your machine.
Document Your Preferences: If you are a California resident who frequently orders from the chain, take a quick screenshot of your rejected cookie settings on the site for your personal records.
No Cost to Learn Your Rights: There is completely zero financial risk or obligation to consult with a consumer protection attorney regarding data privacy violations.
When a company asks for your permission and then completely ignores your answer, it isn’t just a glitch—the lawsuit argues it’s an unlawful invasion of your privacy. Stay connected with our newsroom for the latest court updates, motion filings, and potential settlement news regarding this landmark digital tracking case.