Mazda Website Tracking Lawsuit, Were You Affected? — Shah, et al. v. Mazda Motor of America Inc., No. 4:26-cv-08744

If you clicked “decline all” on Mazda’s website and kept browsing, you weren’t imagining it if something felt off. Two visitors are now suing Mazda Motor of America Inc. in California federal court, claiming the site kept sending their data to Google and Adobe anyway. Here’s what the lawsuit actually says, and whether it touches you.

Mazda Website Tracking Lawsuit — Key Facts

Lawsuit Filed	2026 — exact filing date UNVERIFIED, pending independent docket confirmation
Defendant	Mazda Motor of America, Inc.
Alleged Harm	Website continued sending visitor data to third-party cookies after users selected “decline all”
Law Alleged	California Invasion of Privacy Act (Penal Code § 631, § 638.51); common law fraud/misrepresentation; unjust enrichment
Who Is Affected	Nationwide class of mazdausa.com visitors who clicked “decline all,” plus a California subclass
Court & Case Number	U.S. District Court, Northern District of California, No. 4:26-cv-08744
Current Stage	Complaint filed; no rulings on motions yet — UNVERIFIED, docket status not independently located
Settlement Status	None. No claim form exists. This is an active lawsuit only
Last Updated	September 7, 2026

Who Is Mazda and Why Are They Being Sued for Website Tracking?

Mazda Motor of America runs mazdausa.com, the site shoppers use to research and configure new vehicles before ever visiting a dealer. That makes it a high-traffic research tool — exactly the kind of site where a visitor’s browsing habits (which trims they compare, how long they linger on a listing) are valuable to advertisers. The lawsuit claims Mazda built a cookie consent banner that promised control over that data, then didn’t honor the choice.

What Did Mazda Do to Website Visitors Between 2022 and 2024?

Plaintiffs Vishal Shah and Brian Heinz say they visited mazdausa.com to research Mazda’s CX-series and CX-50 models. Both clicked “decline all” on the site’s cookie banner, which told them: “If you agree to our use of these technologies, please select ‘I Agree’ below” — with decline offered as the alternative. That’s a plain-English promise of a real off switch, not a suggestion.

According to the complaint, it wasn’t one. The lawsuit invokes the California Invasion of Privacy Act — a 1967 wiretapping law that courts have started applying to modern cookies and tracking pixels — because Shah and Heinz say Mazda’s site kept sending HTTP requests carrying cookies to youtube.com and omtrdc.net (Adobe’s tracking domain) after they’d already declined. The complaint states plaintiffs used Chrome Developer Tools’ “Network” tab — a way to watch what a browser actually sends and receives — to catch the traffic in the act.

Mazda isn’t alone in facing this exact theory. Our coverage of the Nike data tracking lawsuit and the Lenovo data privacy lawsuit shows nearly identical “decline all” claims filed against a growing list of companies over the past year. That’s the part worth sitting with: this isn’t really a story about Mazda’s website being uniquely broken. It’s the same plaintiffs’ bar running the same playbook against one company after another, and courts are increasingly letting the cases through the door.

Are You Part of the Mazda Website Tracking Lawsuit?

Here’s exactly how to know if this case includes you.

The proposed class covers:

• Visitors who browsed mazdausa.com and clicked “decline all” on the cookie banner
• Shoppers who researched Mazda’s CX-series or CX-50 models between 2022 and 2024
• Anyone whose browser sent data to Google or Adobe’s tracking domains after declining
• Site visitors located in California, who fall into a separate subclass with additional state-law claims

You’re likely not covered if you never interacted with the cookie banner, if you clicked “accept” rather than “decline,” or if your only contact with Mazda was through a dealership site rather than mazdausa.com directly.

Mazda Website Visitors Outside California — Are You Still Covered?

Yes, for the CIPA claims specifically the case is being brought as a nationwide class, since the alleged wiretapping happened through servers and infrastructure the complaint ties to California. The separate state-law subclass — with its own fraud and unjust enrichment theories — is limited to people who were in California when they browsed.

Not sure if you qualify for the Mazda website tracking lawsuit? A free consultation with a data privacy attorney can help you understand your options before this case moves further along — there’s no cost to ask.

What Are Mazda Website Visitors Asking the Court to Award?

There’s no money on the table yet. No claim form exists, and none will exist unless Mazda settles or loses at trial — file a legal claim if that ever changes, not before. Shah and Heinz are asking the court for damages, disgorgement of the profits Mazda and the tracking companies made off the data, and an order forcing Mazda to actually honor “decline all” going forward.

What Could Mazda Website Visitors Receive If This Settles?

Recent privacy settlements in similar CIPA cases have landed anywhere from double digits to a few hundred dollars per class member, but that number is impossible to predict this early. It depends on how many people file claims, what the evidence shows, and how settlement talks go — if they happen at all. A consumer rights lawyer can walk you through what similar cases have actually paid out, since “similar” doesn’t mean “guaranteed.”

What Should Mazda Website Visitors Do Right Now?

1. Most people don’t need to do anything yet — there’s no deadline and no action required at this stage
2. Save anything that shows you visited mazdausa.com and clicked “decline all” — browser history, screenshots, saved emails from your visit
3. Document which pages you viewed and roughly when, especially if it falls in the 2022–2024 window
4. There’s no lead plaintiff deadline in this type of privacy case — skip that concern
5. Monitor the docket: Shah, et al. v. Mazda Motor of America Inc., No. 4:26-cv-08744, U.S. District Court for the Northern District of California
6. If you want to pursue your own claim rather than wait on the class, a class action lawsuit attorney can tell you whether that makes sense for your situation

Mazda Website Tracking Lawsuit — Full Timeline

Milestone	Date
Alleged class period begins	2022
Plaintiffs’ visits to mazdausa.com, cookies allegedly sent post-decline	2022–2024
Alleged class period ends	2024
Lawsuit filed	2026 — exact date UNVERIFIED
Next scheduled hearing	UNVERIFIED — no scheduling order located
Expected resolution	UNVERIFIED — case in early stage

Mazda Website Tracking Lawsuit — Frequently Asked Questions, No. 4:26-cv-08744

Is there a class action lawsuit against Mazda for website tracking right now?

 Yes. Vishal Shah and Brian Heinz filed suit against Mazda Motor of America Inc. in the U.S. District Court for the Northern District of California, alleging the company’s cookie banner didn’t do what it promised.

Do I need to do anything right now to be part of the Mazda lawsuit? 

No. There’s no claim form and no deadline at this stage. If Mazda settles, class members who fall within the defined period will typically be notified separately.

When will the Mazda website tracking case settle?

 There’s no way to know. The case is still in its early stages, and Mazda hasn’t filed a public response to the specifics of the complaint yet.

Can I file my own lawsuit against Mazda instead of joining the class?

 In some cases, yes — talk to a data privacy attorney about whether an individual claim under CIPA makes more sense for you than waiting on the class outcome.

How will I find out if the Mazda lawsuit settles? 

Watch the docket directly, or check back here — this page will be updated with a notice at the top if the case status changes.

What does “lead plaintiff” mean for the Mazda case? 

It doesn’t apply here. That term is used in securities fraud cases, not consumer privacy suits like this one — Shah and Heinz are proposed class representatives instead.

What specific laws does Mazda allegedly violate? 

The complaint cites the California Invasion of Privacy Act’s wiretapping provision (Penal Code § 631) and its pen register provision (§ 638.51), plus common law fraud and unjust enrichment.

How much could Mazda website visitors get if this case settles?

 Nobody can say yet. Similar CIPA settlements against other companies have ranged widely, and no dollar figure has been proposed in this case.

Sources Used in This Mazda Article

• Court Filing — Class Action Complaint: Shah, et al. v. Mazda Motor of America, Inc., Case No. 4:26-cv-08744, U.S. District Court for the Northern District of California (filed 2026) — docket entry pending independent PACER confirmation
• Related litigation pattern (same theory, same plaintiffs’ firm) verified directly against publicly filed complaints in comparable cases

Researched and written by Israr Ahmad, legal content researcher and founder of AllAboutLawyer.com. Facts in this article are drawn from the class action complaint as summarized to us; the docket itself was not independently located via public case-search tools as of publication and should be confirmed before this piece goes live. Last Updated: September 7, 2026.

Disclaimer: This article is for informational purposes only and does not constitute legal advice. Laws vary by state and individual circumstances differ. For advice about your specific situation, consult a qualified attorney.