If Wyndham Tracked Your Stay and Sent the Data to Facebook, You Deserve the Truth Before You Sign Anything
You booked a hotel room. You paid your money, packed your bag, and trusted the website with where you were going and when. Now investigators say a piece of invisible code on that website — a tool called the Meta Pixel — captured what you searched, what you viewed, the room you picked, the dates you stayed, and then sent it to Facebook along with the unique identifier that connects that data to your personal profile. You never clicked “I agree” to that. Most people never knew it was happening.
We are Attorney911 — The Manginello Law Firm, PLLC. We represent consumers whose private booking information was allegedly captured and transmitted without meaningful consent. If you have a Facebook account and booked travel through WyndhamHotels.com in the past year, we want to talk to you. Call 1-888-ATTY-911 for a free, confidential consultation. There is no fee unless we win. Hablamos Español.
How the Meta Pixel Works — and Why Travelers Never Saw It Happen
The Meta Pixel is a small piece of code that a website operator can embed into any webpage on its site. Once installed, it is programmed to capture nearly every action a visitor takes on the page. The data it collects is then shared with Meta, where it is matched against the visitor’s Facebook profile and used to target advertising back to that visitor — across Facebook, Instagram, Messenger, and the broader Meta advertising network.
The article describing this investigation puts the mechanism in plain language: “One such tool, called the Meta pixel, can be embedded on any webpage and programmed to capture nearly every action a visitor takes on the page. This data can then be used by both the website operator and Meta to better target advertisements to their users.”
“Many website operators use tracking tools on their websites to gather data about their users. One such tool, called the Meta pixel, can be embedded on any webpage and programmed to capture nearly every action a visitor takes on the page.”
What that means in real life is this: a user searches for a hotel in Orlando for spring break, views a family-suite room, inputs check-in and check-out dates, books the room — and every keystroke is being sent to Meta along with the user’s Facebook ID. The user never sees a popup asking whether they want their travel plans shared with a social-media company. The disclosure, if any, is buried in a privacy policy that almost no one reads.
The privacy implications are significant. Hotel searches can reveal romantic getaways, medical trips, business travel, family vacations, and other intimate details about a person’s life. Linking that data to a Facebook profile gives Meta the ability to build an advertising profile of where the user goes, when, with whom, and for what purpose — without the user ever consenting to that specific use of their information.
The State Privacy Laws That May Apply — and Why the Damages Are Statutory
The investigation invokes state privacy laws. Different states have enacted different privacy protections, and which law applies to any given traveler depends on the state where they live, where they booked, and where the harm occurred. The most commonly invoked legal frameworks include:
- Wiretap and electronic-communications privacy statutes. Many states have laws prohibiting the interception of electronic communications without the consent of all parties. Where the law is an “all-party consent” statute, capturing and transmitting a visitor’s search queries and booking data to a third party without informed consent can trigger statutory damages per violation.
- State consumer privacy statutes. Several states have enacted dedicated consumer privacy laws that impose specific dollar amounts per violation when personal information is collected, used, or shared in violation of the statute’s requirements.
- Computer-access and online-privacy statutes. A few states have specific statutes aimed at unauthorized access to or use of personal information collected through a website.
The article states that “certain state privacy laws specify that consumers whose rights were violated could be owed anywhere from $100 to $5,000 each.” That range is not arbitrary — it reflects the dollar amounts different state legislatures have set for statutory damages when a privacy right is violated. A single captured transmission of search-and-booking data to Meta, linked to a unique Facebook ID, can constitute more than one violation depending on the statute.
The dollar amount you could be owed depends on:
– Which state’s privacy law applies — different states have different statutory ranges.
– How many violations occurred — every separate transmission of your data can be a separate violation.
– Whether the violation was willful — some statutes provide for enhanced damages where the conduct was knowing or intentional.
No fee unless we win. We will evaluate your case, identify which state’s privacy laws may apply, and explain the realistic range of statutory damages before you make any decision.
How Much Is Your Case Worth? An Honest Answer
We do not quote verdicts we have not yet won. We do not promise specific dollar amounts. What we can tell you is this:
- The statutory range stated in the investigation is $100 to $5,000 per violation, depending on the state law that applies.
- A single booking session can produce multiple distinct violations. Every search, every page view, every form field completed, every confirmation page reached — each is a separate event the Meta Pixel can capture and transmit. A single trip booking could generate dozens of distinct data transmissions.
- Enhanced damages may apply where the conduct was willful or where the statute authorizes trebling.
- The total recovery for an individual claimant depends on the number of statutory violations attributable to that claimant’s specific booking activity, multiplied by the per-violation damages available under the applicable state law.
To give one illustrative example (not a prediction): if a state privacy statute provides $1,000 per violation, and a claimant’s interaction with WyndhamHotels.com produced 25 separate data-transmission events captured by the Meta Pixel and sent to Meta, the statutory damages for that single booking could reach $25,000. Other states’ statutes provide higher or lower per-violation amounts. The exact number depends on the law that applies to your case and the evidence we preserve.
For a free, confidential evaluation of what your specific case may be worth, call 1-888-ATTY-911. No fee unless we win.
The Defense Playbook — What They Will Do, and How We Counter Every Move
We have litigated against sophisticated corporate defendants for decades. We know what they will try. Here is how we see this case unfolding, and how we counter each move.
Play #1: “You agreed to arbitration in our terms of use — and you can only arbitrate one claim at a time.”
This is Wyndham’s foundational defense. Wyndham will point to its terms-of-use arbitration clause and its class-action waiver and argue that every claimant must file individually, one at a time, in dribs and drabs.
Our counter: Mass arbitration turns this defense on its head. The arbitration clause Wyndham drafted to shield itself from class actions also requires Wyndham to pay per-claim filing fees for every individual arbitration. When thousands of identical claims are filed simultaneously, Wyndham faces millions of dollars in upfront costs before a single case is heard. The cost pressure forces Wyndham to the negotiating table. Mass arbitration has been used successfully against major companies in privacy and consumer cases precisely because it weaponizes the very clause the company drafted to protect itself.
Play #2: “Our privacy policy disclosed tracking — you consented.”
Wyndham will argue that by using the website, the user consented to having their data collected and shared, because the privacy policy mentioned tracking technologies in general terms.
Our counter: Informed consent under most state privacy and wiretap statutes requires more than the existence of a link to a privacy policy. Statutes typically require clear, conspicuous, and specific consent — not a buried reference to “third-party tracking technologies” in a document the vast majority of users never read. A privacy policy is a disclosure, not a consent form. We will examine the exact language of the privacy policy in effect on the date of the user’s visit, the placement and prominence of the disclosure, and whether the user was presented with any meaningful choice.
Play #3: “The data wasn’t personally identifiable — it was anonymous browsing data.”
Both defendants will argue that the Meta Pixel captured only anonymous browsing data — pages visited, searches performed — and that no personally identifiable information was transmitted.
Our counter: The allegations specifically identify the transmission of each user’s Facebook ID alongside the booking data. A Facebook ID is a unique identifier tied to a specific person’s Facebook account. Under most state wiretap and privacy statutes, data linked to a unique user identifier is not “anonymous.” The combination of search queries, booking details, and a unique Facebook ID is precisely the kind of identifiable electronic communication the privacy statutes were designed to protect. We will subpoena Meta’s own records to establish exactly what data Meta received and how Meta used the Facebook ID to match the data to a specific user profile.
Play #4: “These claims are too speculative — the user can’t prove actual harm.”
The defense will argue that even if data was transmitted, the user suffered no concrete injury, and therefore has no standing to sue.
Our counter: Statutory damages under state privacy laws do not require proof of actual economic harm. The legislature set the damages amount precisely because the injury from unauthorized interception and sharing of private electronic communications is dignitary and privacy harm — harm to the individual’s right to control their own information. The statute itself supplies the damages; the plaintiff need not prove out-of-pocket losses. This is a well-established feature of statutory privacy claims, and courts have rejected the “no concrete injury” defense in privacy cases where the statute provides for liquidated or statutory damages.
Why Mass Arbitration Is the Right Vehicle — and Why Timing Matters
Mass arbitration works because it creates simultaneous financial pressure on the defendant. When Wyndham drafted its arbitration clause, it was designed to keep consumer claims small, slow, and individual. Mass arbitration weaponizes that clause: Wyndham must pay a filing fee for every individual claim, and when thousands of claims arrive at once, the cost is designed to force a global resolution.
There is a practical reason to act now. The investigation is active, and the sign-up window is tied to the scope of the claims being assembled. Travelers who booked through WyndhamHotels.com within the past year are the relevant cohort. As time passes, the relevance of your specific booking to the assembled mass arbitration diminishes, and the evidence supporting your claim becomes harder to preserve and prove.
We send preservation letters the day we are retained. We identify your specific booking records. We obtain your Facebook data download. We lock in the technical evidence before it can be overwritten or purged.
Frequently Asked Questions
What is mass arbitration?
Mass arbitration is a procedure in which hundreds or thousands of consumers file individual arbitration claims against the same company over the same issue at the same time. Each claimant files their own claim with an arbitration provider such as AAA or JAMS. The sheer volume of simultaneous filings creates enormous filing-fee pressure on the defendant, which is designed to force a global resolution. Mass arbitration is not a class action — each claimant pursues an individual claim with an individual recovery, not a share of a common fund.
What is the Meta Pixel?
The Meta Pixel is a tracking tool developed and distributed by Meta Platforms, Inc. (the parent company of Facebook). It is a small piece of code that a website operator embeds into its webpages. Once embedded, the pixel is programmed to capture user actions on the page — pages viewed, searches performed, information entered, and more — and transmit that data to Meta, where it is matched to the user’s Facebook profile using a unique Facebook ID. The data is then used for targeted advertising. The allegations in this investigation are that Wyndham embedded the Meta Pixel on WyndhamHotels.com and that the pixel captured and transmitted booking-related data without travelers’ informed consent.
Who is eligible to join this mass arbitration?
The investigation is signing up people who have a Facebook account and who booked travel through WyndhamHotels.com within the past year. If you meet those two criteria, you may be eligible. The specific scope of the claims being assembled may evolve as the investigation develops. Call 1-888-ATTY-911 for a free, confidential eligibility assessment.
How much money could I receive?
The statutory range identified by the investigation is $100 to $5,000 per violation, depending on which state’s privacy laws apply to your case. The total recovery for an individual claimant depends on the number of statutory violations attributable to your specific booking activity and the per-violation damages available under the applicable state statute. Some state statutes permit enhanced or trebled damages for willful conduct. We will give you an honest assessment of what your case may be worth after we evaluate your specific booking.
Is there a deadline to sign up?
The mass arbitration is being assembled now, and the sign-up window is tied to the scope of the claims being investigated. As time passes, the relevance of older bookings to the assembled claims diminishes, and the evidence becomes harder to preserve and prove. We encourage you to call promptly so we can preserve the evidence while it is still available. Call 1-888-ATTY-911 for a free consultation.
What information did Wyndham share with Facebook?
The allegations are that the Meta Pixel on WyndhamHotels.com captured user activity — including the pages they visited, the hotels and products they viewed, the searches they performed, and details about the reservations they booked — and transmitted that data to Meta along with each person’s unique Facebook ID. The Facebook ID is what links the captured data to a specific person’s Facebook profile.
Do I have to go to court?
In most arbitration proceedings, no in-person courtroom appearance is required. Arbitration is conducted through written submissions, document exchange, and sometimes video or phone conferences. The arbitrator — not a judge and not a jury — decides the case. The process is generally faster and less formal than traditional litigation. That said, the specific procedural requirements depend on the arbitration provider and the rules governing the proceeding.
How long does mass arbitration take?
The timeline varies. Mass arbitration is designed to create pressure for a global resolution early in the process, which can shorten the timeline significantly. If the defendant agrees to a global settlement, resolution can come in months. If the defendant forces individual proceedings on each claim, the process can take longer. We will explain the likely timeline for your specific case during your free consultation.
What if I don’t have a Facebook account?
The current investigation is focused on people who have a Facebook account, because the Facebook ID is the linking mechanism that ties the captured data to a specific user profile. If you do not have a Facebook account, you may still have privacy claims depending on the specific data transmitted and the state laws that apply. Call us to discuss your specific situation.
Will this cost me anything to sign up?
No. The investigation and sign-up process costs nothing. We offer a free consultation, and our representation is on a contingency basis — no fee unless we win. You pay nothing out of pocket. Our fee comes as a percentage of the recovery we obtain for you. Contact us today.
What happens if Wyndham and Meta refuse to pay?
If the defendants refuse to resolve the claims, the arbitration proceeds on each individual filing. Each claimant’s case is decided by a neutral arbitrator based on the evidence and the applicable law. The arbitration clause Wyndham drafted means the company cannot simply refuse to participate — it is contractually obligated to arbitrate. If the defendants fail to pay an arbitrator’s award, enforcement mechanisms are available, including court confirmation of the award.
Is this a class action?
No. This is a mass arbitration. Each claimant files an individual claim and pursues an individual recovery. The mechanism is different from a class action, in which one or a few representatives pursue a claim on behalf of an entire class and any recovery is shared. Mass arbitration keeps each claimant’s claim individual while creating collective leverage through volume.
Has Attorney911 handled this type of case before?
Our firm has handled mass-tort and consumer-protection cases for more than 24 years. Mass arbitration is a relatively newer procedural mechanism, but it has been used successfully against major companies in privacy and consumer cases. Ralph Manginello’s 27+ years of trial practice, Lupe Peña’s inside knowledge of the insurance-defense playbook, and our firm’s culture of aggressive, thorough preparation are what we bring to every case. Past results depend on the facts of each case and do not guarantee future outcomes. Call 1-888-ATTY-911 to discuss whether your case is right for our firm.
We Take These Cases Because Companies That Track You Without Your Consent Should Answer for It
We have spent our careers fighting for people who were failed by systems they trusted — drivers who trusted the road, patients who trusted their doctors, workers who trusted their employers. Travelers who trusted a hotel booking website with where they were going and when deserve the same fierce, thorough representation.
If Wyndham or Meta captured and transmitted your booking data through the Meta Pixel without your informed consent, you have rights under state privacy laws, and those rights carry statutory damages. The exact amount depends on the law that applies to your case and the evidence we preserve. We will evaluate your case for free, explain your options in plain language, and handle the entire process on contingency — no fee unless we win.
Call 1-888-ATTY-911 now. Or reach us online to schedule your free consultation. We serve clients across the country and conduct consultations in English and in Spanish. Hablamos Español.
The investigation is active. The evidence has a shelf life. The moment to act is now.
Attorney911 — The Manginello Law Firm, PLLC. Legal Emergency Lawyers™. Serving clients nationwide in mass-tort, consumer-protection, and catastrophic-injury matters. Free 24/7 consultation. Contingency fee representation — no fee unless we win. Call 1-888-ATTY-911.
Past results depend on the facts of each case and do not guarantee future outcomes. The information on this page is for general informational purposes only and does not constitute legal advice. Statutory damages ranges discussed herein are derived from the investigation’s public characterization and from state statutory frameworks that vary by jurisdiction. Your specific eligibility, the applicable law, and the potential recovery in your case depend on facts that must be evaluated individually. Call 1-888-ATTY-911 for a free, confidential evaluation of your case.