Legal complaints targeting fast-casual restaurant chains do not rely merely on complaints about unsolicited emails. Instead, they apply statutes like the federal Electronic Communications Privacy Act alongside state wiretap rules. These state laws were written during the mid-twentieth century to stop unauthorized telephone monitoring, but creative litigators now apply them directly to web network requests.
The plaintiffs' technical evidence rests on HTTP POST payloads transmitted when a consumer loads an order page. When an individual opens Papa John's digital storefront, JavaScript payloads automatically run within the customer's browser. If a user explicitly clicks "Reject All" on the consent management platform, that preference must update the tag management system immediately. If the engineering architecture fails to block those tags, the user's browser keeps executing code that captures mouse movements, order inputs, and referral URLs before sending them to outside ad servers.
Corporate legal defenses often maintain that web tracking libraries do not constitute wiretapping. They argue that third-party vendors act merely as technical service providers processing operational traffic on the host's behalf. In multiple federal jurisdictions, however, judges have rejected this argument. When these analytics platforms retain collected data to refine their own machine learning algorithms, market profiles, or broader targeting services, courts increasingly rule that these software tools qualify as unannounced third-party listeners.
