Greenley v. Kochava, Inc.; Javier v. Assurance IQ, LLC
Summary
This litigation-tracker page summarizes a group of CIPA class actions in California federal courts concerning website and app trackers, session-replay tools, and chat vendors. It reports that some courts (including the Southern District of California in Greenley) have allowed pen-register and other CIPA claims to proceed while others have rejected the pen-register theory, producing a split; the page notes that these are procedural rulings and not final merits determinations.
Litigation Status
Procedural Posture
The page summarizes a wave of CIPA class actions in 2025–2026; some pen-register and interception claims survived pleadings and proceeded to discovery in certain federal courts, while other courts rejected the pen-register theory, producing a regional split.
Reported Holding
The tracked sources report that some federal courts in California have allowed CIPA-based claims to proceed: a Southern District of California decision in Greenley reportedly allowed a §638.51 pen-register claim to proceed against a mobile-app data broker; Javier v. Assurance IQ is reported to have held that retroactive consent embedded in a terms-of-service banner is generally insufficient under §631. The sources describe a regional split in California federal courts over the pen-register theory and note that multiple courts have treated typed-but-not-submitted form contents as a communication under §631.
What the Court Decided
According to the page: the Southern District of California allowed a §638.51 pen-register claim to proceed in Greenley; Javier (as discussed) held that retroactive consent in a terms-of-service banner is generally insufficient under §631; several courts have held that typed-but-not-submitted form contents can qualify as communications under §631. The page characterizes federal courts in California as divided on the pen-register theory.
What the Court Did Not Decide
The sources do not report a uniform resolution on whether pen-register/trap-and-trace statutes apply broadly to web trackers and pixels, nor definitive rulings on merits, damages, or class certification for the broader category of web-tracking cases.
Significance
Generally viewed as plaintiff-favorable. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.
What This Page Does and Does Not Say
This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.
Technologies at Issue
- session replay
- Meta Pixel
- TikTok Pixel
- Google Analytics
- fingerprinting scripts
- web chat software
- third-party tracking scripts
Third parties named or identified in tracked sources: Kochava, Salesforce, LivePerson, Zendesk, Meta, TikTok, Assurance IQ.
Statutes Invoked
- Cal. Penal Code §§ 630–638.55 (including §§ 631(a), 632, 637.2, 638.51)
Claims Asserted
- Cal. Penal Code § 631(a) – interception/reading communications in transit
- Cal. Penal Code § 632 – recording of confidential communications
- Cal. Penal Code § 638.51 – pen register / trap and trace device (installation/use without court order)
- Cal. Penal Code § 637.2 – statutory damages provision
- Cal. Penal Code §631(a) – interception/reading communications in transit
- Cal. Penal Code §632 – recording of confidential communications
- Cal. Penal Code §638.51 – pen register / trap and trace device (installation/use without court order)
- Cal. Penal Code §637.2 – statutory damages provision
What This Matter May Mean for Website Operators
For operators using similar technologies, the recurring factual questions in matters like this one are when session recording begins relative to consent and whether input masking covers every field; whether chat transcripts or typing previews transit a vendor's servers before the visitor presses send; whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.
Because this matter is pending, anything reported here is procedural — allegations and interim rulings, not final determinations.
Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.
Related Intelligence
Sources
- When a Website Becomes a Wiretap
- Greenley v. Kochava, Inc.; Javier v. Assurance IQ, LLC — Website Tracking Litigation
About This Page
Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.
How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.
Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.
Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website