24 Hour Fitness Won't Let You Unsubscribe From Marketing Spam, So I Fixed It

24 Hour Fitness has a broken unsubscribe page. You get one of their marketing emails, click the unsubscribe link at the bottom, and it takes you to:

https://www.24hourfitness.com/members/unsubscribe

You enter your email and click unsubscribe. You get a mysterious error message in Spanish.

I found the bug. It's one line of JavaScript. I reported it back in November 2025 and got no response, so I built my own unsubscribe page:

What the heck is this? 🤔

This translates to "Connection error while retrieving the OneTrust token."

OneTrust is a B2B SaaS platform that helps companies comply with consent and privacy regulations. It looks like the web dev team at 24 Hour Fitness messed up this integration.

The CAN-SPAM Act makes these kinds of emails illegal, and the FTC can prosecute. Verkada was fined $2.95 million in 2024 for ignoring opt-out requests, and Experian was fined $650,000 in 2023 for the same thing.

Marketing email = psychic attack

I don't subscribe to anything. Not newsletters. Not Substacks. Not even blogs from writers I deeply care about. My inbox is for communication, not marketing.

I'm definitely not subscribing to 24 Hour Fitness marketing spam.

Since October 2025, I've received 40 marketing emails. Every single one links to the same broken unsubscribe page.

Each of these emails is a psychic attack. An attack on my attention. Here are the subject lines to give you an idea:

I'm paying for this membership. I can't opt out of their spam. This is evil.

This isn't new for 24 Hour Fitness

I found this Reddit post from February 2019:

Almost 7 years ago, same problem.

24 Hour Fitness has had unsubscribe problems for at least 7 years. Not only do they make it hard to cancel your gym membership, they also make it hard to escape their marketing emails.

I hope they fix this. If I'm dealing with it, I'm sure thousands of others are too.

I reported it. No response.

I submitted a bug report via their contact form back in November 2025.

They replied: "Thank you Ahmed, for reaching out! We will make sure your comments are forwarded to the appropriate person. Please be assured we are doing our best to follow up as soon as possible, typically within 10 business days."

Weeks later. No response. Bug still broken. Emails still coming.

The one-line JavaScript fix

I looked at their code. The bug is embarrassingly simple:

$.ajax({
    type: "POST",
    url: m.urlPost,
    data: JSON.stringify({...}),
    contentType: !1,  // BUG: !1 === false
    ...
})

contentType: false tells jQuery to skip the Content-Type header. The server expects JSON. It rejects the request.

The fix:

contentType: "application/json"

One line. Broken for months.

So I built my own unsubscribe page

My page calls the same API with the correct header. It just works.

If you know someone on the 24 Hour Fitness engineering team, please share this with them. It's a one-line fix.