24 Hour Fitness Won't Let You Unsubscribe From Marketing Spam, So I Fixed It
4 days ago
- #JavaScript
- #Privacy
- #CAN-SPAM
- 24 Hour Fitness has a broken unsubscribe page that displays an error message in Spanish when attempting to unsubscribe from marketing emails.
- The issue stems from a one-line JavaScript bug where the Content-Type header is incorrectly set to false instead of 'application/json'.
- Despite reporting the bug in November 2025, 24 Hour Fitness has not fixed the issue, leading to continued spam emails.
- The CAN-SPAM Act requires companies to provide a working opt-out mechanism, with violations carrying fines up to $53,088 per email.
- 24 Hour Fitness has had unsubscribe problems for at least 7 years, as evidenced by a Reddit post from February 2019.
- The author built their own unsubscribe page that correctly calls the API with the proper Content-Type header.
- The irony is noted that 24 Hour Fitness uses OneTrust, a consent management platform, yet violates consent regulations.