European Wax Center Paid $5 Million to Make a Pixel Lawsuit Disappear

The Non-Financial Ledger

When you book a waxing appointment, you are not shopping for a car or signing a mortgage. You are scheduling something personal. You are entering the kind of information that sits at the intersection of your body, your schedule, and your private routines. The people who visited waxcenter.com were not reading news articles. They were booking appointments for services that require physical intimacy and trust.

According to the lawsuit, European Wax Center embedded tracking technology, including Meta pixels, cookies, and analytics code, on that website. That technology allegedly captured what those visitors were doing and sent it to third parties. The people who booked appointments had no reason to believe anyone else was watching. They were not offered a meaningful choice, and the complaint alleges they were not told.

The betrayal described in this case is not abstract. Your browsing history on a health-adjacent booking site tells a story about you: when you go, how often, what treatments you seek. Aggregated with the data that advertising platforms already hold, that information can be used to build or enrich a profile of you that you never agreed to share. The platform may change. The profile persists.

The settlement offers these people $10. That amount does not cover a single minute of the frustration required to locate an old IP address, remember which dates you visited a website, and submit a claim form under penalty of perjury. For many people in the class, the rational choice will be to do nothing, forfeit their claim, and receive nothing while remaining legally barred from suing European Wax Center over this conduct ever again.

That is the system functioning as designed. The company pays a fraction of what a full trial might have cost. The lawyers take a third. The people whose data allegedly traveled without permission get a coupon-sized check, if they jump through enough hoops to claim it at all.

Legal Receipts

The following passages are drawn verbatim from the Settlement Agreement filed in Cumor v. European Wax Center, Inc., Case No. 26-CA-002430.

“The material allegations of the complaint relate to Defendant’s alleged disclosure of information to third parties via pixels, cookies, code, and/or tracking or analytics tools on Defendant’s website allegedly without permission.” Settlement Notice, Exhibit B, Basic Information Section

• This is the core allegation in plain language: European Wax Center’s website sent user data to third parties through tracking tools, and it did so without permission. The phrase “allegedly without permission” is the company’s legal hedge, but the allegation stands as the documented basis for a $5 million settlement.
• The reference to “pixels, cookies, code, and/or tracking or analytics tools” and the specific mention of the Meta pixel elsewhere in the agreement indicates the tracking was not incidental. These are deliberate implementation choices by whoever manages the company’s digital infrastructure.

“At all times, Defendant has denied and continues to deny any wrongdoing whatsoever and has denied and continues to deny that they committed, or threatened or attempted to commit, any wrongful act or violation of law or duty alleged in the Action.” Settlement Agreement, Recital G

• This denial is standard settlement language, but it functions as a liability firewall. By denying everything while settling for $5 million, the company purchases closure without creating a legal record of wrongdoing that could be used against it in future litigation or regulatory action.
• The agreement further specifies that the settlement “shall not be construed as or deemed to be evidence of or an admission or concession of liability or wrongdoing,” meaning even the existence of this payment cannot be cited as proof that anything wrong occurred.

“In no event shall the total amount paid by Defendant exceed five million dollars ($5,000,000.00 USD).” Settlement Agreement, Section 1.29

• The $5 million is a ceiling, not a floor. European Wax Center is only required to deposit funds sufficient to cover actual approved claims, attorney fees, service awards, and administration costs. Unclaimed funds from checks not cashed within 180 days revert directly back to the company.
• Because this is a claims-made structure, the actual cash leaving the company could be substantially less than $5 million, depending on the claims rate.

“Those Settlement Class Members whose cash benefit checks are not cleared within one hundred eighty (180) days after issuance will be ineligible to receive a cash settlement benefit and Defendant will have no further obligation to make any payment pursuant to this Settlement Agreement or otherwise to such Settlement Class members. Unpaid funds from uncleared checks will revert back to Defendant.” Settlement Agreement, Section 2.1(e)

• This clause means the company profits from inaction. Every class member who forgets to cash a $10 check, moves, or simply loses the envelope contributes to a pool of money that flows directly back to European Wax Center. The company has a financial interest in low claims-rate and low check-cashing rates simultaneously.

“All Class Members who do not validly exclude themselves from the Settlement Class, regardless of whether they timely file a valid Claim Form, will otherwise be bound by all of the terms of this Agreement… and will be barred from bringing any action against any of the Released Parties concerning the Released Claims.” Settlement Agreement, Section 4.7

• This is the mechanical core of what makes the settlement so valuable to European Wax Center. If you do nothing, file nothing, receive nothing, and are not even aware this lawsuit exists, you are still stripped of your right to sue over this conduct. Silence equals release.
• The only way to preserve your legal rights is to affirmatively opt out in writing before the deadline. Most people in the class will never receive notice, or will not understand its significance, and will forfeit their claims by default.

Public Deception: What the Website Implied vs. What Was Happening

The complaint alleges a fundamental gap between what visitors to waxcenter.com would reasonably expect when booking a personal service appointment and what was actually occurring with their data on the backend.

• Website visitors booking appointments had no documented notice that their browsing activity was being captured by tracking pixels and transmitted to third-party platforms, including Meta. The expectation of a person using a service company’s booking page is that their information goes to that company, not to an advertising ecosystem.
• The company’s settlement language acknowledges the tracking technology was present: “pixels, cookies, code, and/or tracking or analytics tools.” The lawsuit alleges this occurred without user permission. No public disclosure adequate to put visitors on notice is referenced anywhere in the settlement documents.
• European Wax Center signed the settlement agreement on March 25, 2026, through its Chief Financial Officer Thomas Kim, while simultaneously maintaining in the same document that “the claims asserted in the Action lack merit.” The company paid $5 million for a case it publicly claims it would have won.

Profit-Maximization at All Costs

The tracking technology at the center of this case is a standard tool of digital advertising optimization. Companies embed these pixels to improve ad targeting, measure conversion rates, and squeeze more value from their marketing spend. The cost-benefit calculus is direct: the tracking pixel generates financial value for the company; the risk of getting caught is a probabilistic fine at some unknown future point.

• The Meta pixel and Google Analytics tools that appear in the lawsuit allegations are products companies deliberately install. They do not appear on websites by accident. Their installation reflects a decision to prioritize advertising performance data over the privacy interests of the people using the site.
• The maximum settlement fund is $5,000,000. Because the settlement is claims-made and unclaimed funds revert to the company, the actual cash outlay will be substantially less. The only guaranteed large payment is the attorney fee ceiling of $1,666,666.67, approximately one-third of the total fund, which comes out of the same pool as the class member payments.
• European Wax Center operates hundreds of franchise locations across the United States. The $5 million cap on liability, for a class covering every U.S. visitor to its website over roughly two years, functions as a predictable cost of doing business rather than a deterrent.
• The company’s Chief Financial Officer signed the settlement agreement, a detail that signals this resolution was processed as a financial transaction to be managed, not a compliance failure to be corrected.

Societal Impact Mapping

Public Health and Personal Privacy

The specific nature of waxcenter.com as a booking platform for body-care services gives this data collection a dimension that a generic e-commerce pixel case would not carry.

• Appointment booking data for personal care services reveals behavioral patterns tied to physical routine, body image, and personal habit. When that data reaches advertising platforms, it can be used to target individuals with advertising that exploits those patterns.
• The class definition specifically includes people who booked appointments on the site, meaning the most sensitive subset of visitors, those providing real scheduling and service intent data, are the core of this case.
• The released claims cover “invasion of privacy” and “breach of fiduciary duty/confidentiality,” meaning the harm recognized by the legal framework includes a dimension of trust violation, not merely a technical data compliance failure.
• Users who visited the site with privacy tools active, such as the Google Analytics Opt-out Browser Add-on or cookie-blocking extensions, are explicitly excluded from the settlement class. The only people eligible to claim are those whose data was most exposed, people browsing without defenses, who are disproportionately those with the least technical sophistication.

Economic Inequality

The financial architecture of this settlement reproduces a familiar pattern: corporate liability is resolved at a scale that is trivial relative to the company’s operations, while the individuals harmed receive amounts too small to justify the effort of claiming.

• The maximum individual payment is $10.00, and that amount is subject to pro-rata reduction if too many people file claims. Class counsel can receive up to $1,666,666.67. The legal representation for the class stands to collect 166,666 times the amount each individual affected person can receive.
• The claim process requires submitting a specific IP address and the specific date of each website visit. Most people do not retain this information and would need to research their device or router logs to find it. This technical barrier functions as a filter that suppresses claims by people who lack the time or know-how to retrieve old network data.
• The 180-day check-cashing window imposes a secondary deadline that will result in additional unclaimed funds reverting to the company. The people most likely to miss this window are those who move frequently, who lack stable mailing addresses, or who are managing more pressing financial pressures than tracking a $10 settlement check.
• The named class representatives, Jason Cumor and Sydney Dunn, are entitled to service awards of up to $2,500 each, in addition to any recovery they receive as class members. This is a standard feature of class action settlements, but it means the people who bore the litigation risk receive 250 times what the average class member receives.

The Settlement Isn’t Justice

The structural features of this settlement ensure that European Wax Center emerges from this case having paid the minimum necessary to extinguish the maximum possible future liability.

• The settlement contains no admission of wrongdoing. Section 10.4 of the agreement states explicitly that nothing in the settlement “is, may be deemed, or shall be used, offered or received against the Released Parties” as evidence of liability, wrongdoing, or fault in any civil, criminal, or administrative proceeding. European Wax Center purchased a clean record along with closure.
• The released claims are extraordinarily broad. Class members release every possible claim arising from the use of “the Meta pixel or other pixels, cookies, code, and/or tracking or analytics tools” on waxcenter.com, including claims under federal law, California law, Florida law, and common law theories of breach of fiduciary duty, invasion of privacy, unjust enrichment, and negligence. One $10 payment extinguishes all of it.
• The settlement also forecloses Unknown Claims, meaning claims that class members do not yet know exist. Section 1.33 explicitly invokes a waiver of California Civil Code Section 1542, the provision that normally protects consumers from releasing claims they are unaware of. European Wax Center’s liability for conduct class members have not yet discovered is extinguished by this settlement.
• European Wax Center retains the right to terminate the entire settlement if more than 2,000 class members opt out or object. This termination trigger gives the company leverage to prevent any organized resistance from reaching critical mass: if word spreads and too many people try to preserve their rights, the company can walk away entirely.
• Class Counsel agreed in advance to limit their fee request to no more than one-third of the total settlement fund and agreed that European Wax Center would not oppose that request. This mutual non-aggression arrangement on fees is a documented feature of class action economics that critics argue reduces the incentive for plaintiff attorneys to push for larger class member recoveries.

The Math They Don’t Put in the Press Release

This Is the System Working as Intended

Nothing about this outcome is an accident or a failure of the legal system. Every feature of this settlement is a predictable product of how class action privacy litigation functions in the United States today.

• The claims-made structure with a reversion clause means the company’s actual financial exposure is determined by how few people successfully file claims. The company has no incentive to make the claims process easy and a direct financial incentive to ensure it is burdensome, since unclaimed money reverts to the company.
• The total denial of wrongdoing, written into the settlement agreement itself, means this case produces no legal record of violation. Future plaintiffs, regulators, and the public cannot point to this settlement as evidence that European Wax Center engaged in unlawful tracking. The $5 million was specifically structured to prevent that outcome.
• The opt-out termination trigger of 2,000 class members gives the company a documented mechanism to nullify any organized grassroots response to the settlement. If enough people try to preserve their rights, the company can void the entire deal and return to litigation, forcing class members to choose between an inadequate settlement and the uncertainty and delay of continued litigation.
• The broad release of Unknown Claims, executed through a Section 1542 waiver, means that even if new facts emerge about the scope of the tracking, the people in this class cannot bring new claims. The company purchased a forward-looking immunity from accountability for conduct not yet discovered.
• The simultaneous settlement of federal ECPA claims, Florida state claims, and California state claims under a single fund means that the most stringent applicable law, California’s Invasion of Privacy Act, which can carry per-violation statutory damages, is resolved for the same $10 as the lesser claims. Aggregating claims across jurisdictions into a single fund suppresses the potential liability that the strongest claims would have generated individually.

What a Legitimate Fix Looks Like

The core failure this case exposes is structural: tracking technology that intercepts user data without consent can be embedded and operated for years, and the maximum consequence is a claims-made settlement where most affected people receive nothing and the company pays a fraction of its potential statutory liability.

Regulatory Track

• The Federal Trade Commission should issue rulemaking that explicitly classifies the use of third-party tracking pixels on service booking platforms as a deceptive or unfair trade practice when deployed without affirmative, informed consent. The current ambiguity in the regulatory treatment of pixel tracking is what made this litigation necessary in the first place.
• State attorneys general in Florida and California, both of whose privacy statutes are named in this complaint, should investigate whether European Wax Center’s website tracking practices remain in place and whether they comply with current law. This settlement, by its own terms, cannot be used as evidence of a violation, which means regulatory investigation is the only remaining avenue for an independent factual determination.
• Website operators running appointment-booking platforms for personal services should be required by regulation to disclose in plain language, at the point of booking, exactly which third-party tracking tools are active and what data they collect and transmit.

Legislative Track

• Congress should pass comprehensive federal privacy legislation that establishes opt-in, affirmative consent as the legal standard for any collection and transmission of browsing or behavioral data to third parties. The current patchwork of state laws, ECPA, CIPA, and the Florida Security of Communications Act, produces inconsistent protection and encourages forum-shopping by both plaintiffs and defendants.
• Legislatures should amend the class action framework to require that unclaimed settlement funds in cases involving consumer privacy violations be directed to a designated consumer privacy enforcement fund or a qualified cy-pres recipient, rather than reverting to the defendant. The current reversion structure gives defendants a financial interest in minimizing claim rates.
• Statutory minimum damages in privacy cases should be set at a level that creates genuine deterrence for large-scale data interception. At $10 per person, the per-violation economic incentive to embed tracking technology without consent is clearly not eliminated by the current litigation landscape.

Corporate Governance Track

• European Wax Center should be required, as a condition of final settlement approval, to conduct a documented third-party audit of all tracking technologies currently deployed on waxcenter.com and to certify to the court which tools are active and what data they transmit to third parties.
• Corporate boards of companies that operate consumer-facing digital platforms should be required to include a designated privacy officer with board-level reporting authority whose compensation is not tied to advertising revenue metrics. When the people overseeing a platform’s tracking practices benefit financially from that tracking, the oversight function is structurally compromised.
• Executive compensation structures at companies subject to privacy litigation should include claw-back provisions triggered by settlements or judgments arising from data collection practices that occurred during the executive’s tenure.

What Now?

The company responsible for this settlement is European Wax Center, Inc. The settlement agreement was signed on behalf of the company by Thomas Kim, Chief Financial Officer. Class Counsel is Bursor & Fisher, P.A. (Sarah Westcot, Alec Leslie, Stephen Beck). Defense counsel is Baker & Hostetler LLP (Joel Griswold, Bonnie DelGobbo). The case is pending before the Circuit Court for the 13th Judicial Circuit, Hillsborough County, Florida, Case No. 26-CA-002430.

If you visited waxcenter.com between June 30, 2023 and the date the court grants preliminary approval of this settlement, you are likely a member of the class. You have three meaningful options:

• File a claim at the settlement website to receive up to $10.00. You will need your IP address and the date(s) you visited the site. You will be giving up all future legal claims against European Wax Center related to this conduct in exchange.
• Submit a written opt-out request before the deadline. This preserves your right to sue independently, though the practical cost of individual litigation almost always exceeds any likely recovery.
• File a written objection with the Hillsborough County Circuit Court before the objection deadline if you believe the settlement terms are inadequate. Your objection becomes part of the public court record.

Watchlist: Who Has Jurisdiction Over This Conduct

• Federal Trade Commission (FTC): Primary federal authority over deceptive and unfair data practices by commercial entities. The FTC has brought pixel tracking enforcement actions under Section 5 of the FTC Act.
• Department of Justice (DOJ): The Electronic Communications Privacy Act, one of the statutes at the center of this case, carries criminal as well as civil penalties. The DOJ has jurisdiction to investigate willful violations.
• California Attorney General: The California Invasion of Privacy Act is one of the named statutes. The California AG has standing to investigate and enforce CIPA independently of private litigation outcomes.
• Florida Attorney General: The Florida Security of Communications Act is named in the Florida complaint. Florida’s AG has independent enforcement authority.
• Consumer Financial Protection Bureau (CFPB): Where tracking data is linked to financial service interactions, the CFPB has supervisory authority over data practices.

Grassroots and Mutual Aid

• Install the Google Analytics Opt-out Browser Add-on and a reputable cookie-blocking extension on every browser you use. This is free, takes five minutes, and makes you ineligible for future pixel-tracking settlements, which means it also means no one can track you in the first place. The settlement claim form itself confirms these tools work: people who had them installed are excluded from the class because their data was not captured.
• Share this article with people who use waxcenter.com. The settlement notice process relies on email addresses in the company’s own records. People who used the site without creating an account may never be notified. Word-of-mouth is the only mechanism for reaching them before the claims deadline.
• Support digital rights organizations working on pixel tracking litigation and legislation, including the Electronic Frontier Foundation (EFF) and the Electronic Privacy Information Center (EPIC). These organizations are tracking the broader pattern of pixel-tracking lawsuits across the healthcare, personal services, and retail sectors, and their advocacy directly shapes the regulatory and legislative landscape described in the fix section above.
• When you encounter a personal services website, open your browser’s developer tools and check the network tab for third-party calls to Meta, Google, or other advertising platforms. Document what you find. Regulatory investigators and journalists need this kind of ground-level evidence to build cases for enforcement action.