Crumbl Cookies Sued Over Info Sharing With Payments Processor

Cookie maker and bakery franchise chain Crumbl LLC shared the financial information of consumers with its payments processor Stripe Inc. without their consent in violation of the California Invasion of Privacy Act, a proposed federal class action said.

Kristen Lockhart alleged that Crumbl incorporated Stripe’s “wiretaps” in the www.crumblcookies.com website, allowing Stripe to record consumers’ mouse movements, clicks, keystrokes, IP address, physical location, and financial information.

The wiretaps worked by installing tracking cookies on consumers’ web browsers when they visited websites of merchants using Stripe as a payments processor, according to a complaint filed Thursday in the US District Court ...