JustPlay, a mobile rewards and gaming app, is facing a class action in Illinois tied to how it allegedly handled “biometric identifiers” such as face geometry or similar scans used for identity verification and fraud prevention. Illinois is a focal point for these disputes because of the Biometric Information Privacy Act (BIPA), a strict state law that requires companies to provide specific written notice, obtain written consent before collecting biometric data, and publish a retention and destruction policy. The settlement website indicates the case concerns Illinois residents whose biometric data was collected without consent, with a flat $15 payment available and no proof required—suggesting the alleged collection may have occurred through routine app features or third‑party verification tools embedded in the user experience. The lawsuit was filed to enforce BIPA’s consent-and-disclosure requirements and to seek statutory damages for unauthorized collection, even if users cannot point to a traditional financial loss. Its significance is twofold: it reinforces that app and ad-tech ecosystems can face liability when biometric features are introduced without clear, compliant permission flows, and it underscores Illinois courts’ willingness to treat biometric privacy as a standalone consumer right. Similar BIPA cases have targeted employers using fingerprint timeclocks and consumer platforms using facial recognition, and regulators and lawmakers are increasingly scrutinizing biometric and “sensitive data” practices—seen in frameworks like the FTC’s unfair/deceptive practices authority and state privacy laws (e.g., California’s CPRA) that heighten obligations around notice, purpose limitation, and safeguards when companies process sensitive identifiers like biometrics.