SAN FRANCISCO — Two privacy class actions with the potential for millions in statutory damages against Facebook and Zynga sounded destined to fail Friday at the U.S. Court of Appeals for the Ninth Circuit.

But Facebook may not be completely off the hook, because a three-judge panel sounded willing to entertain breach-of-contract and other state law claims against the social network for revealing user IDs to third parties.