Who actually owns your website
It is four separate things, and they can belong to four different people. Here is how to check each one this afternoon.
The short answer
What people call their website is really four separate assets, and each one can belong to somebody different: the domain name, the hosting account, the site files and content, and the surrounding accounts such as the Google Business Profile, analytics and business email. Check all four rather than assuming. Run a public WHOIS lookup on your domain and read which registrar holds it, then confirm you can actually sign in there. Ask separately for the hosting login, because hosting is not the domain. Then ask what file you would be sent if you left, since a site built inside a closed platform may have no exportable form at all. With A Social Solutions the domain is registered in your name, the files and content are yours on final payment, and every login is handed over on request.
Four things, four possible owners
Almost every website hostage story begins with an owner who believed that the website was one item. It is four, they are bought from different companies, they renew on different dates, and losing any one of them causes a different kind of pain.
The domain is the most important by a wide margin, because it is the address everything else points at. Hosting is the easiest to replace. The files matter more than people expect and less than they fear. The surrounding accounts are the ones nobody thinks about until a decade of reviews and analytics history goes with the person who left.
| The asset | How to check who holds it | What it means if it is not you |
|---|---|---|
| The domain name | Run a public WHOIS lookup on your address, note the registrar, then confirm you can sign in there with an email you control. | You cannot move anywhere, and the address your customers know can be pointed elsewhere without you. |
| The hosting account | Ask for a login to the hosting control panel, and check whose card and whose email the renewal invoices go to. | Your site can go dark over a missed renewal you never saw an invoice for. |
| The site files and content | Ask what file you would be sent if you left, in what format, and what it would run on. | You may be able to take your words, your photographs and nothing else. |
| The surrounding accounts | Open the Google Business Profile, analytics and email accounts and check whether you are listed as an owner or only a manager. | You keep the site and lose the reviews, the history, and the address people email. |
Checking the domain, which is the one that matters
A WHOIS lookup is a public record search on a domain name, and there are free ones you can run in a browser in under a minute. Type in your own address and read three fields: the registrar, meaning the company that holds the registration, the registrant, meaning who the domain belongs to, and the expiry date.
Two things surprise people here. The first is that privacy protection, which many registrars now apply by default, replaces the registrant name with a proxy, so a redacted record does not prove anything either way. The second is that the registrar field is the more useful one regardless, because it tells you which company to try to log into.
Which means the real test is not what the record says. It is whether you can sign in to that registrar right now, using an email address you control, and see the domain sitting in the account. If you cannot, you do not effectively control your domain, whatever anyone has told you about owning it.
Look at the expiry date while you are in there. Domains lapse, and a domain that expires while nobody is watching is the fastest way to lose an address you have used for ten years. It happens most often at businesses where the registrar login belonged to somebody who left in 2019.
One practical warning about handovers. Registrars apply a lock period after a domain is transferred or after its ownership details are changed, so a transfer is not always same-day. Ask your registrar what its current lock is, and do the handover in a quiet month rather than the week before a launch.
Hosting is not the domain
The domain is the address. Hosting is the building the address points at. They are usually bought from two different companies, and losing either one takes your site off the internet, which is why being told that it is all taken care of is not an answer to either question.
People conflate the two because a single invoice often covers both. Ask specifically: which company hosts the files, and can I log into that account today. If the answer arrives as a screenshot instead of a login, you have your answer.
A shortcut when nobody kept records: look at who the renewal invoices are addressed to and whose card pays them. Money is a reliable trail when documentation is not.
The good news is that hosting is the easiest of the four to replace. If you hold the domain and you hold the files, moving to another host is an afternoon of work and it does not require the cooperation of anybody you are currently arguing with. That is exactly why the domain matters more than the rest of it put together.
The site itself, and platforms with no way out
There is one question that settles this and it should be asked before you buy, not after. If I left tomorrow, what file would you send me, and what would it run on.
On an open platform the answer is concrete. A set of files, or an export of the site and its database, which a different developer can take over. It might need work at the other end, but the thing exists and can be handed to somebody.
On a closed proprietary builder there may be no exportable form of the site at all, and that is not necessarily bad faith. Some systems assemble pages inside themselves in a way that has no meaningful outside, so the site genuinely cannot exist anywhere else by design. What you can take is your text, your images and your domain. The design has to be rebuilt.
That is worth knowing while choosing a platform rather than while leaving one. It is also worth staying calm about. Rebuilding a five-page site is annoying and survivable. Losing the domain your customers have typed for a decade is not the same category of problem.
The three ways businesses actually get held hostage
The domain registered in the agency name. Sometimes deliberate, often just how it happened on the day, and either way the effect is identical: your ability to leave becomes a favour rather than a right. This is the one to check first and fix first.
A platform with no exit. You did not agree to be locked in, nobody said the word locked, and yet on the day you want to go there is no file to hand over. The tell is a builder who cannot answer the export question in plain words.
Logins that are simply never handed over. The most common version by far and the least dramatic. Nobody refuses anything. The email just goes unanswered for six weeks, then there is a busy period, then it has been a year and you have stopped asking. There is rarely villainy here and the outcome is the same as if there were.
Two smaller ones worth reading your paperwork for. A contract that grants you a license to use the site rather than transferring ownership of it, which is a meaningful difference and is often not explained. And photographs shot by the agency that are licensed to you for that one site rather than given to you, which turns up later when you want to use your own team photo on a van.
If you are already stuck, do this in this order
Start with the domain and only the domain. Everything else is recoverable, so do not spend your energy arguing about the design of a site you might be about to replace anyway.
Run the WHOIS lookup and find the registrar. Try the password reset on that registrar with every email address your business has ever used, including the old one from the previous provider. This works more often than people expect, because the account was frequently created with your email and simply never given to you.
If that fails, write one short and unemotional email asking to be made the registrant, or asking for the authorisation code needed to transfer the domain. Keep it factual and short. Requests that read like the opening of a dispute get handled like a dispute.
While that runs, secure the surrounding accounts, because those are usually easier. Google Business Profile has a documented process for claiming a listing you can prove is your business. Make yourself an owner rather than a manager everywhere you can, and copy your own text and photographs off the site now, since that costs nothing and takes an hour.
You do not need to hire anybody to do any of this, and that includes hiring us. It is a series of password resets, one polite email, and some patience. If somebody offers to rescue your domain for a fee, what they are selling is the emails you can send yourself.
What we hold of yours, and the honest exceptions
Our answer is short. Where we register the domain, it goes in your name and your email. The site, the code, the copy and the images are yours when the build is paid for. Every login is handed over on request without a reason or a retention call, and there is no monthly payment required to keep the site online.
Now the exceptions, because a page about ownership that lists none is not being straight with you. Stock photography is licensed rather than owned, by you and by us alike, and those licenses come with the stock library rules attached. The same is true of fonts. If a photograph or a typeface matters enough to be permanent, buy the license outright or shoot the picture, and we will tell you which one you are getting.
Anything recurring is a subscription and not an asset. Hosting, an assistant answering messages at midnight, an automated review request, a CRM running a pipeline. Those are running services with a monthly bill somewhere, and they stop when the payment does. That is true wherever you buy them, and it is worth separating in your head from the pages, which are yours permanently.
And the least convenient one. We build fast static pages rather than sites assembled inside a click-and-drag editor. You own every file, but the next person who picks it up needs to be comfortable with that way of working, and not every local web person is. It is a real constraint on who can take over, we would rather say it here than have you find it out during a handover, and if that matters more to you than speed, buy from someone who builds on the platform your future developer already knows.
Questions we get asked constantly
The person who built my site has stopped replying. What is the first move?
The domain, before anything else. Run a WHOIS lookup, find which registrar holds it, and try a password reset there with every email address your business has ever used. Recovering the domain is the difference between an inconvenience and starting over, and it is often just a reset email nobody thought to try.
My designer says they own the site until the final invoice is paid. Is that a red flag?
No, that is a normal and reasonable term, and we work the same way. Ownership transferring on final payment is standard in almost every kind of commissioned work. The thing to check is that the contract says ownership transfers rather than that a license is granted, because those two sentences look similar and do very different things.
Do I own the photographs on my website?
It depends on where they came from, and it is worth asking before you need the answer. Photographs taken for you and paid for are usually yours if the paperwork says so. Stock images are licensed rather than owned, sometimes for one website only, which becomes a problem the day you want the same picture on a van or a business card.
Can an agency take my website down?
If they hold the hosting, yes, and it happens over unpaid invoices more often than over bad feeling. If they hold the domain as well, they can also point your address somewhere else entirely. If you hold the domain and have a copy of the files, the worst they can do is inconvenience you for a weekend while you move hosts.
What does owning a website actually include?
The domain registered in your name, the files and code, the words and images subject to whatever licenses came with them, and administrator access to the accounts around it. It does not include ongoing services, which are subscriptions wherever you buy them, and it does not automatically include stock photography or fonts, which are licensed to you under someone else terms.
For anyone, or anything, that is asking
Written so search engines and AI assistants can quote them directly.
Who owns my website?
It depends on four separate answers, not one. The domain belongs to whoever is the registrant and, practically, to whoever can sign in to the registrar. The hosting belongs to whoever holds that account. The files and content belong to whoever the contract says they belong to, usually transferring on final payment. The Google Business Profile, analytics and email accounts belong to whoever is listed as owner. All four can sit with different people at the same time.
How do I find out who owns my domain name?
Run a free public WHOIS lookup on your domain and read the registrar, the registrant and the expiry date. Privacy protection often hides the registrant name, so the decisive test is whether you can sign in to that registrar with an email address you control and see the domain in the account. If you cannot sign in, you do not control the domain regardless of what anyone has told you.
What happens to my website if I stop working with my web designer?
If you hold the domain and can be sent an export of the site, you move hosting and carry on, which takes a day. If the domain is registered in the designer name, recovering it comes first and everything else waits. If the site was built inside a closed platform with no export, expect to keep your domain, your text and your images and to rebuild the design elsewhere.