The Checkbox

The sentence is the most common on the internet. I have read and agree to the terms. Beside it sits a small empty square, and the square must be filled before anything will proceed. You have filled it thousands of times. You filled it to open an account, to install an update, to read past the first paragraph of an article, to order a coffee through an app while the line moved behind you. The square is the smallest unit of modern compliance, and you operate it with the attention you give a light switch.

You did not read the terms, and the arithmetic explains why. In 2008 two researchers at Carnegie Mellon, Aleecia McDonald and Lorrie Faith Cranor, set out to price the act of reading. They measured the privacy policies of the most visited sites and found a median length near 2,500 words, about ten minutes of reading each. They estimated how many such documents an ordinary person passes in a year and arrived at well over a thousand. Read every one and you would spend in the region of 244 hours, around 76 working days, doing nothing else. The document attached to the square is built to a length that forecloses the behavior the square certifies. You are asked to confirm that you have read what the system has arranged for you to be unable to read.

The length is the design. A document that runs to thousands of words of subordinate clauses, cross-references, and defined terms communicates two things at once. To a court it communicates that disclosure occurred. To you it communicates that reading is futile. Both messages serve the same party. The side that wrote the document can read it perfectly well, because it pays lawyers by the hour to do exactly that. You have a coffee getting cold and a queue at your back. The asymmetry is total: one side knows every clause, the other knows none, and only one side leaves the transaction bound to having agreed.

Consider what the square actually does when you fill it. A field somewhere changes from false to true. A timestamp is written. From that moment a fact exists that the company can retrieve and present: this person agreed, on this date, at this hour. The product is that record. The square is an instrument for manufacturing it at scale, one click at a time, and it functions whether or not a single word above it was understood.

The square is the descendant of the signature, with one part removed. A signature was once a deliberate act. You read a document, you grasped that signing committed you, and the mark you made carried the weight of that deliberation. The law treated it as proof because the act and the understanding traveled together. The tick keeps the evidentiary half of the signature and discards the deliberative half. It produces the proof while shedding the understanding the proof once stood for. What survives is the portion useful to the party collecting it.

This hollowing has a longer history. The older idea of a contract required what lawyers once called a meeting of the minds: two parties understood the same terms and chose them together. That picture persists inside the word consent long after the practice behind it has gone. What replaced it carries its own name. In the 1940s the legal scholar Friedrich Kessler described the standard-form contract, drafted entirely by one side and handed to the other to take or leave, and called it the contract of adhesion. A contract of adhesion is accepted whole. You adhere to it the way a stamp adheres to an envelope, by being pressed against it. The terms behind the checkbox are contracts of adhesion that have been digitized and multiplied until you adhere to dozens before lunch.

The courts have decided that the tick counts. A line of rulings established that a clickwrap agreement, the kind that requires you to fill the square before continuing, binds the person who filled it. The test is opportunity. If the terms were available, if the link was there to be clicked, if the square was placed where a reasonable person would see it, the law treats your tick as assent and inquires no further into what passed through your mind. The system needs only to have offered. You needed only to have proceeded. The square closes the distance between those two facts and files the result under consent.

The clearest demonstration of what the square measures arrived as a joke. On the first of April, 2010, a British game retailer called GameStation slipped a clause into the terms on its checkout page. By placing an order, the clause announced, the customer granted the company a perpetual option on his immortal soul, to be surrendered within five working days of written notice, delivered if the company wished in six-foot letters of fire. A second clause offered an exit: anyone who noticed could click a link, keep the soul, and collect a five-pound voucher. Over the test, 7,500 people bought games. Around 88 percent filled the square and passed the soul clause without a glance. The small fraction who read closely enough to find the joke were paid for it. The retailer never came to collect. It had proved the single thing it set out to prove, that the square produces agreement to anything, in any quantity, on demand. Place a sentence about a soul above the box and the box will gather souls.

The interface is built to produce the tick. In the cleanest designs the forward button and the agreement are one button, so that proceeding and consenting cannot be prised apart. For years the box arrived already filled, consent granted before you touched it, until enough jurisdictions ruled that a pre-checked box could not stand as agreement and the choreography was redrawn. The redrawing changed the motion and preserved the outcome. The box is empty now, and the only route through it runs through the tick. You may decline. Declining returns you to where you began, with nothing opened, nothing installed, nothing read. The square is optional the way the exit is optional to a person who came in to buy bread.

Now ask the question the design works hardest to keep you from reaching. What does the square erase. Picture the same transaction without it. A service does something with your data, or fails, or causes you harm, and the question of who carries the cost stays open. The company wrote the rules. It built the product. It set the terms of the exchange. In that open state a regulator or a court might ask whether the company made its conduct clear to the people it would affect. The square shuts the question. Afterward the company produces the record. The user was informed. The user agreed.

Read the freight the tick carries across. The arbitration clause withdraws your access to a court and routes any dispute into a private forum the company selects. The class-action waiver ensures you arrive at that forum alone, one customer against an institution, in a venue priced to discourage you from arriving at all. The license to your data grants the use of what you produce to parties named nowhere you can find. The indemnification clause can oblige you to cover the company's losses if your use of the service causes it harm. None of these was negotiated. Each was drafted, posted, and carried into force by the single motion of your hand on the box. The square moves the duty to understand off the party that wrote the terms and onto the party that ticked them. The company's obligation to be clear becomes your obligation to have read.

This is the operation the square performs across the whole system at once. Every interface that asks you to agree before proceeding runs the same procedure: it converts an exchange you did not control into a decision you appear to have made. The efficiency of it is distributive. No single clerk denied you anything. No executive signed a document stripping your rights. The terms were public. The link was live. The box was optional in the manner of a locked door. By the time something goes wrong, responsibility has been arranged until no one appears to have acted. The company points to your agreement. You point to a document you were structurally prevented from reading. The arrangement holds because each part of it can be defended on its own, and it fails only from the one vantage no participant is required to take, which is the vantage of the whole.

So return to the square and the sentence above it, and read the transaction it has been recording all along. The system did not want your attention. It had already calculated, to the hour, that you would not spend it. It did not, in the first place, want your data, though it took that on the same tick. What the square was built to buy was a responsible party. It needed a name to produce when the conduct it had already planned came under question, and it needed that name to belong to you. You supplied it. Every time you filled the square, you agreed to become the person who agreed, so that the company would not have to be the party that decided. You read nothing. You agreed to everything. What you signed, in the end, was a release of the one thing the system could not manufacture for itself: someone to hold responsible, who turns out, on the record, timestamped and retrievable, to be you.