The users are going through an OAuth flow and creating an account. Presumably they are agreeing to a ToS as part of that.