Who actually owns your website? Find out before you need to know.

Here’s a question that costs people thousands of euros every year, usually at the worst possible moment: if you fired your agency tomorrow, what would you actually walk away with?

Not “what did you pay for.” What would still be yours on Monday morning. The domain, the site files, the Google Business Profile, the ad account, the analytics history. Most business owners assume all of it. A depressing number find out otherwise the week they try to leave.

Paying for something and owning it are different things on the internet. The good news: this takes about twenty minutes to check, and you can do it today while nothing is on fire.

The five accounts that decide everything

Ownership isn’t one thing. It’s five separate accounts, each with its own login, each capable of being held hostage independently.

1. The domain name. This is the big one. Whoever controls the registrar account — GoDaddy, Namecheap, Cloudflare, whatever — controls your web address and your email. Not your hosting company. Not your developer. The registrar account.

2. The hosting or deployment account. Where the site actually runs. Cloudflare, Vercel, a cPanel somewhere, a WordPress host.

3. The source code or CMS content. The actual files, or the database and admin login of whatever platform runs the thing.

4. The Google Business Profile. For a local business this is frequently worth more than the website. It’s also the account agencies most often “helpfully” create under their own email.

5. The advertising and analytics accounts. Google Ads, Google Analytics, Search Console, Meta. These hold your history, and history is what makes an ad account perform.

Any one of these registered to youragency@gmail.com instead of you is a lever someone else gets to pull.

The twenty-minute audit

Do this now, not during a divorce.

Find your domain. Search “ICANN lookup” and enter your domain. The public record shows the registrar and, unless privacy is on, the registrant. Then try the real test: go to that registrar’s site and click “forgot password” with your own email address. If no reset email arrives, the account isn’t yours.

Check your Google Business Profile. Sign into Google with your business email and search for your business name. If you see “Own this business?” instead of your own management dashboard, someone else holds it.

Check Google Ads and Analytics. Log in and look at the user list. Are you listed as admin or owner, or as a “standard user” on someone else’s account? If your agency’s account holds your ad history, you don’t get to take that history with you.

Ask for the code. Ask your developer for a copy of your site files or repository access. It’s a two-minute request. The answer — and how long it takes — tells you a lot.

What “we manage that for you” usually means

To be fair, most agencies don’t set this up maliciously. It’s laziness and convenience: it’s faster to register the domain on the agency’s own account than to walk a client through creating one, and nobody’s thinking about the breakup during the honeymoon.

But convenience compounds into leverage. Three years later, the agency is unresponsive, you want to leave, and the domain renewal is in their name. Now you’re negotiating for something you’ve been paying for since 2023.

The specific tell to listen for: “don’t worry, we handle all that.” A good answer sounds different. It sounds like “the domain is in your registrar account, we have delegated access, and you can revoke it whenever you want.”

Getting it back if you got it wrong

Not a disaster. Just tedious.

Domains transfer between registrars — you need an authorization code from the current registrar, and after a change of ownership or a transfer, the domain typically sits under a 60-day lock before it can move again. Which is why you start this while everyone’s still friendly.

Google Business Profile has a formal process: you request access, and per Google’s own documentation, the current owner is notified by email and has three days to respond. If they don’t, you may be able to claim it through verification. Slow, but it works, and it doesn’t require anyone’s cooperation.

Ad and analytics accounts are the ones you may simply lose. You can be granted access to an account you don’t own, but if the agency owns it, they can revoke you. Rebuilding from zero costs real money in relearning time.

The site itself is the least bad case. Worst case you rebuild it — and if you’re at that point anyway, read the four fixes that usually beat a rebuild before you spend anything, then what a professional site actually costs if you decide to go ahead.

The clause worth asking for

Before you sign anything, ask one question: “When this ends, what do I keep?”

Get the answer in writing. It should say the domain, the site files, the content, the Google Business Profile, and admin on the ad and analytics accounts are yours, and that they transfer within a set number of days on request.

Any agency that hesitates on that clause is telling you exactly what their retention strategy is. It’s one of the questions worth asking before you hire anyone — and the cheapest insurance in this industry.

How we do it, for what it’s worth

Client owns the domain, on their own registrar account, paid with their own card. Client owns the GitHub repository and the Cloudflare project. Client is owner on Google Ads, Analytics, Search Console and the Business Profile — we’re a user on their account, not the other way around.

It makes us easier to leave. That’s the point. An agency that keeps clients by holding their infrastructure isn’t keeping them with the work.

Not sure what you currently own? Send us your domain and we’ll tell you what the public records say and what to check next — no pitch attached. If the answer is “everything’s fine, stay where you are,” we’ll say that too. Ask us, or see how we build if the audit turns up something worse than you hoped.