Every business that sells online, runs a subscription, or asks customers to create an account faces the same problem: how do you prove the customer agreed to your terms? Clickwrap agreements are the standard answer. A clickwrap flow presents your terms of use, sale terms or licence terms at the point of sign-up, checkout or download, and requires the user to take a positive step, such as ticking a box or clicking an "I agree" button, before they can proceed.
The mechanism exists because Australian contract law does not assume agreement. A person is generally only bound by terms they were given reasonable notice of before or at the time the contract was made. Clickwrap is engineered to satisfy that requirement in a way that can later be proved: the user saw the terms, and the user said yes. Done properly, it is the online equivalent of signing on the dotted line. Done poorly, your terms may bind no one, and since November 2023 the consumer law consequences of a one-sided clause are more expensive than ever.
This guide sets out how clickwrap agreements actually work in Australia: who is involved, what has to happen for a click to create a binding contract, where the mechanism commonly fails, and the limits that no click can override.
Who is involved in a clickwrap contract
Four sets of players are involved in a clickwrap contract:
- Your business: drafts the terms and designs the acceptance flow. You want the widest enforceable protection and a record you can produce in a dispute.
- The user: the customer, subscriber or account holder whose click constitutes acceptance. The Australian Consumer Law protects them from one-sided terms regardless of what they clicked.
- The ACCC: the regulator that enforces the unfair contract terms regime and the consumer guarantees. It can seek court orders and penalties against businesses that propose or rely on unfair terms.
- The courts: decide the two questions that matter: whether the terms were actually incorporated into the contract, and whether they survive the Australian Consumer Law.
The interests of the first two players pull in opposite directions, and that tension is where the mechanism gets its shape. A business wants broad terms that limit liability and preserve flexibility. The law insists that a user's consent be real, informed and recorded. Clickwrap sits at the point where the two meet: it is the method by which a business converts a user's action into legally usable consent. The regulator and the courts then police how honestly that conversion is done.
What has to happen for a click to bind
The starting point is ordinary contract law. A binding contract needs an offer, acceptance and consideration. In a clickwrap transaction, your terms form the offer, the user's click is the acceptance, and payment or access to your product is the consideration. Nothing about doing this online changes the analysis. The Electronic Transactions Act 1999 (Cth) and its state counterparts provide that a transaction is not invalid merely because it took place through electronic communications, and that electronic methods can satisfy writing and signature requirements where the method identifies the person, indicates their intention, and is reliable in the circumstances. A properly designed click is capable of being a signature in the eyes of the law.
But the legislation does not make every click count. For the click to be meaningful, two things must happen, in order.
Notice: the terms must reach the user before they commit
The terms must be presented before or at the moment of commitment: before the user creates the account, pays, downloads or first logs in. This is the lesson of the leading Australian case on online terms. In eBay International AG v Creative Festival Entertainment Pty Ltd [2006] FCA 1768, the Federal Court considered a condition printed on the back of festival tickets and available on the promoter's website that purported to cancel tickets resold for profit. The court held the condition was not incorporated into the contracts of buyers whose attention was never drawn to it before purchase, including those who bought through the Ticketmaster website. A condition the buyer never saw at the time of contracting was not part of the deal.
The practical translation is simple: a link buried in a website footer is not notice, and a statement that "by using this site you agree to our terms" is weak reliance. The terms, or a clearly visible link to them, need to sit inside the flow at the exact point of commitment.
Acceptance: an active, recorded "yes"
The user must do something affirmative. This is what distinguishes clickwrap from browsewrap. Browsewrap treats mere use of the site as acceptance; clickwrap requires an explicit act such as ticking a box or clicking an "I agree" button. Australian courts treat the two very differently. A click that the business can point to is evidence of actual consent; a browsewrap theory rests on deemed consent, which courts are reluctant to infer.
The Federal Court's decision in Australian Competition and Consumer Commission v Valve Corporation (No 3) [2016] FCA 196 illustrates how the mechanism works when it is done properly. Steam's subscriber agreement was presented during account creation and accepted with a click, and the court treated it as forming part of the contract between Valve and its Australian users. The case is also a reminder that the acceptance step is an evidence step: the user's identifier, the date and time, the device and IP address, and the exact version of the terms accepted are what you produce later if anyone disputes what was agreed.
Where the mechanism commonly fails
Clickwrap fails in predictable places. The most common are:
- Terms shown after the commitment: Presenting terms at checkout is fine; presenting them after payment, or in a welcome email, is too late. The contract was already formed on the old basis.
- Pre-ticked boxes: If the box is ticked by default, the user may not have taken any positive step, and the record is ambiguous. The box should start empty and the click should be deliberate.
- Browsewrap shortcuts: A footer link with "by using this site you agree" is cheaper to build but far weaker in court. If the only record of acceptance is continued use, you are relying on a presumption that may not be made.
- Mobile friction: A link that is easy to tap and terms that are legible on a phone matter twice: once for notice, and again for the fairness analysis below.
- Missing audit trails: If you cannot show who accepted what, when, and which version applied, the click loses most of its evidentiary value. Version control matters because you will often have several generations of terms in force at once.
- Silent changes: When you materially change your terms, such as fees, features or data practices, the new terms bind only users who accept them. A blocking "we have updated our terms, review and accept to continue" step on next login keeps your consent records current. Minor changes can be notified by email and in-app notice, but you should be able to identify which version each user agreed to.
One further constraint: if you distribute through a platform such as the Apple App Store or Google Play, the platform's own terms overlay yours, and your clickwrap cannot override them. Your acceptance flow should be designed around what the platform permits.
The consumer law limits no click can override
A click proves consent. It does not prove the terms are lawful. Two parts of the Australian Consumer Law (ACL), which is Schedule 2 of the Competition and Consumer Act 2010 (Cth), limit what clickwrap terms can do.
Unfair terms in standard form contracts
Most online sign-up terms are standard form contracts: offered on a take-it-or-leave-it basis with no room for negotiation. The ACL's unfair contract terms regime covers standard form contracts with consumers and with small businesses. A consumer contract is a supply of goods, services or land to an individual for personal, domestic or household use. A small business contract is one where at least one party employs fewer than 100 people or had a turnover under $10 million in its last income year. For most readers of this article, that means the regime applies to you.
Under s 23 of the ACL, a term is unfair if it causes a significant imbalance in the parties' rights and obligations, is not reasonably necessary to protect the legitimate interests of the party advantaged by it, and would cause detriment if relied on. Transparency is part of the test: a term expressed in plain language, legible, clearly presented and readily available is less likely to be found unfair than one buried in fine print. The burden sits with the business: a term is presumed not to be reasonably necessary unless the business proves otherwise.
The stakes changed on 9 November 2023. Before that date, an unfair term was simply void. Since then, proposing an unfair term in a standard form contract, or applying or relying on one, is itself a contravention of the ACL, and each unfair term counts as a separate contravention. The maximum penalty for a body corporate is the greater of $100 million, three times the benefit obtained, or 30 per cent of adjusted turnover, and individuals face penalties of up to $2.5 million. The ACCC has made clear it will continue to target unfair terms in standard form contracts across industries, and it has been urging businesses to review and remove unfair terms from their standard documents.
Consumer guarantees
The other hard limit is the consumer guarantees. Under s 64 of the ACL, any term that purports to exclude, restrict or modify the consumer guarantees is void. This is where clickwrap runs into the Valve case: the court accepted that Steam's clickwrap terms formed part of the contract, but still found that Valve's representation that all fees were non-refundable was misleading, because the guarantees, including the guarantee of acceptable quality, cannot be contracted out. A well-executed click cannot save a clause that the ACL forbids. Any attempt to exclude guarantees, or to state that refunds are unavailable when a product fails a guarantee, should be treated as unenforceable.
Where a lawyer earns their fee
A lawyer's role in clickwrap is not to design the button. It is to check both halves of the mechanism: the substance of the terms and the design of the acceptance flow. In practice that means:
- reviewing existing terms of use, sale terms and licences against the unfair contract terms regime, and redrafting clauses that carry penalty risk, such as unilateral variation rights, auto-renewal, early termination fees and broad data deletion powers;
- advising on the right framework for your model, such as an end-user licence agreement for installed software, SaaS terms for cloud products, or platform terms for marketplaces;
- designing the notice and acceptance flow so that incorporation is provable, including what to record and how to version terms;
- structuring re-consent events when you make material changes; and
- responding if the ACCC comes knocking, or if a dispute turns on whether a user actually agreed to a particular term.
The cost of a review is modest compared with the alternatives: a clause found void mid-dispute, a penalty for proposing an unfair term, or terms that a court simply refuses to enforce against your customers.
Enforceability is settled before the first click
The decisive moment in clickwrap is not the click itself. It is the design work that happens before: whether the terms were visible at the right time, whether acceptance was active and recorded, and whether the substance of the terms survives the Australian Consumer Law. A term nobody saw binds no one. A term that is unfair binds no one either, and now exposes the business that proposed it to penalties. Both failures are preventable at the drafting stage, and both are far cheaper to fix before launch than after a dispute or a regulator's inquiry begins. If you are not confident that the flow and the terms would survive scrutiny, that is the point at which a lawyer's review pays for itself.