Website Terms of Service: How to Draft Terms That Bind Your Users and What Happens When They Don't

By Hank FasthoffJuly 6, 2026

A website's terms of service are a contract between the business and every person who uses the site. If the terms are enforceable, they govern the relationship: where disputes are resolved, what the business's liability is, whether claims go to arbitration or court, what intellectual property rights attach to user content, and what happens when the relationship ends. If the terms aren't enforceable, none of those protections exist, and the business is exposed to litigation on the other side's preferred terms in the other side's preferred forum.

Enforceability depends almost entirely on how the terms are presented to the user and how the user's agreement is obtained. A well-drafted terms of service document that nobody agreed to is worth less than a mediocre one that every user affirmatively accepted through a properly designed interface.

Browsewrap, Sign-in-Wrap, and Clickwrap

Courts have organized online terms into three categories based on how the user's assent is obtained, and the enforceability of the terms follows directly from the category.

Browsewrap agreements are terms posted on the website via a hyperlink (typically in the footer), with no requirement that the user click, check, or take any affirmative action to indicate agreement. The user is presumed to agree to the terms by using the site. Courts routinely refuse to enforce browsewrap agreements against consumers. In Nguyen v. Barnes & Noble, Inc., 763 F.3d 1171 (9th Cir. 2014), the Ninth Circuit held that a hyperlink to terms of use at the bottom of a website, without any textual notice or affirmative assent requirement, was insufficient to bind the user. In Specht v. Netscape Communications Corp., 306 F.3d 17 (2d Cir. 2002), the Second Circuit reached the same result when terms were available only below a download button the user never needed to scroll past.

Browsewrap has survived judicial scrutiny in narrow circumstances: where the user is a sophisticated commercial party (not a consumer), where the user engaged in repeated and extensive interactions with the site, or where the user possessed actual knowledge of the terms. In OCLC, Inc. v. Anna's Archive (January 2026), a federal court upheld a browsewrap agreement against a sophisticated party that accessed the service extensively and was deemed to have accepted the terms through its pattern of use. But for consumer-facing businesses, browsewrap carries substantial enforceability risk.

Sign-in-wrap (also called hybridwrap) falls between browsewrap and clickwrap. The user sees a statement near the sign-up or login button (something like "By creating an account, you agree to our Terms of Service and Privacy Policy," with hyperlinks to both documents) and proceeds by clicking "Create Account" or "Sign Up." The user doesn't check a separate box, but the user performs an affirmative action in close proximity to a notice that the action constitutes acceptance.

Enforceability of sign-in-wrap depends on the design. In Meyer v. Uber Technologies, Inc., 868 F.3d 66 (2d Cir. 2017), the Second Circuit enforced Uber's sign-in-wrap agreement where the registration screen's design was "reasonably conspicuous" and the user's act of signing up constituted "unambiguous manifestation of assent." In Cullinane v. Uber Technologies, 893 F.3d 53 (1st Cir. 2018), the First Circuit refused to enforce a slightly different version of Uber's registration screen where the notice was less conspicuous. The difference between the two screens was a matter of font size, placement, and visual prominence, not the underlying legal principles. Sign-in-wrap works when the notice is impossible to miss. It fails when the notice competes with other elements on the page.

Clickwrap agreements require the user to take a distinct, affirmative action (checking a box, clicking an "I Agree" button, or scrolling through terms and clicking "Accept") that's specifically tied to the terms. Courts treat clickwrap as the most enforceable category of online agreement, with enforceability rates above 70 percent in litigated cases. In Feldman v. Google, Inc., 513 F. Supp. 2d 229 (E.D. Pa. 2007), the court held that clicking "I agree" after being presented with the terms constituted a valid contract. The Uniform Electronic Transactions Act (UETA) and the Electronic Signatures in Global and National Commerce Act (E-SIGN) both confirm that electronic assent carries the same legal weight as a handwritten signature.

What the Terms Should Include

An enforceable terms of service document should address the following provisions, each of which protects the business in a different category of dispute.

Limitation of liability caps the business's monetary exposure. A typical provision limits the business's total liability to the fees paid by the user in the 12 months preceding the claim. Without a limitation of liability, the business faces uncapped exposure for every claim a user might assert, including consequential damages that can dwarf the value of the underlying transaction.

Disclaimer of warranties disclaims implied warranties of merchantability and fitness for a particular purpose to the extent permitted by applicable law. For SaaS and digital services, a disclaimer that the service is provided "as is" and "as available" is standard. Disclaimers must be conspicuous under the UCC to be enforceable.

Mandatory arbitration and class action waiver requires users to resolve disputes through individual arbitration rather than litigation and waives the right to participate in class actions. Arbitration clauses are among the most frequently litigated provisions in terms of service, and their enforceability depends on conspicuous presentation and affirmative assent. Browsewrap arbitration clauses are routinely struck down. Clickwrap arbitration clauses are routinely upheld.

Governing law and venue specifies which state's law governs the agreement and where disputes must be filed (or where arbitration takes place). A Texas-based business should specify Texas law and a Texas venue.

Intellectual property ownership states that the business retains all IP rights in the site, its content, and its software, and defines the limited license the user receives. If users submit content (reviews, comments, photos), the terms should include a license grant from the user to the business that's broad enough to cover the business's intended use of that content.

User conduct and acceptable use defines what users can and can't do on the site. Prohibited activities typically include violating laws, infringing third-party rights, submitting malicious code, scraping content, creating fake accounts, and interfering with the site's operation.

Account termination gives the business the right to suspend or terminate a user's account for violating the terms, with or without notice. Without a termination provision, the business may face arguments that it breached an implied obligation by shutting down a user's account.

Refund and return policies should be stated in the terms or incorporated by reference. For eCommerce businesses selling physical products, state consumer protection laws and credit card network rules impose minimum return and refund requirements that the terms must comply with.

Modification provisions explain how the business will update the terms and what constitutes the user's acceptance of the updated version. Most terms include a provision stating that continued use of the site after the effective date of modified terms constitutes acceptance. For material changes (adding an arbitration clause, changing data handling practices, altering pricing), requiring affirmative re-acceptance is the safer approach, because a user who never saw the updated terms may not be bound by the changes.

How to Present the Terms for Enforceability

Substantive content is only half the equation. How the terms are presented determines whether they're enforceable.

Use clickwrap or sign-in-wrap rather than browsewrap. Require affirmative assent (a checkbox, an "I Agree" button, or an action in close proximity to a conspicuous notice) before the user can complete the transaction, create an account, or access the service.

Make the notice conspicuous. The text linking to the terms should be visible without scrolling, displayed in a font size comparable to the surrounding text, in a contrasting color or style that distinguishes it from decorative elements, and positioned close to the assent mechanism (the checkbox or button). A hyperlink buried in footer text that's the same color and size as the background isn't conspicuous.

Preserve timestamped records of every user's acceptance. Record the date, time, IP address, and user account associated with the acceptance event. If the business later needs to enforce the terms (to compel arbitration, for example), it must prove that the specific user accepted the specific version of the terms that was in effect at the time.

Require re-acceptance after material changes. Posting updated terms and assuming continued use constitutes acceptance may not be sufficient for significant additions or modifications. If the updated terms include a new arbitration clause or materially different liability provisions, prompt the user to accept the new version before proceeding.

Practical Recommendations

Don't use browsewrap for terms that include arbitration clauses, liability limitations, or other provisions with significant legal consequences. Courts have been consistent: browsewrap fails when it counts. Use clickwrap or, at minimum, a well-designed sign-in-wrap that provides reasonably conspicuous notice and requires an affirmative action that unambiguously manifests assent.

Draft terms that reflect your business, not someone else's. A terms of service document copied from another company describes that company's operations, risk profile, and legal requirements. If the copied terms promise services you don't provide, disclaim liabilities you do face, or omit provisions your business needs, they're worse than useless because they set expectations you can't meet and omit protections you need.

Test the acceptance flow on every device your users access. A sign-in-wrap that's conspicuous on a desktop screen may be invisible on a mobile phone with a 3.5-inch display. Courts have noted that screen size affects whether notice is "reasonably conspicuous," and a mobile-first business needs a mobile-first acceptance flow.

Review and update the terms at least annually. Changes in your business operations (new products, new data practices, new states of operation), changes in applicable law (new state privacy statutes, new FTC guidance, new consumer protection requirements), and changes in how courts evaluate online terms (new decisions on sign-in-wrap design, new rulings on arbitration enforceability) all warrant updates. When you update, maintain a version history so you can prove which terms applied to which user at which time.