Unless you're using strict privacy controls in your browser, you generally expect that online stores will track at least a bit of your activity, if just to send you targeted ads when you browse the web. However, a proposed class action lawsuit is claiming that Casper was far nosier. The suit alleges that the mattress-in-a-box startup violated the Electronic Communications Privacy Act by using code from NaviStone to grab personal data from web visitors without permission. Reportedly, it would collect keystrokes, clicks, IP addresses and other identifying info whether or not you actually submitted it. In theory, Casper could see what you'd typed into a form even if you backed out.