Who Actually Owns Your Website
Pull the WHOIS record for your domain and read the registrant line. Sometimes it is the business. Often it is a web designer, a family member who helped out in 2019, or an agency that stopped returning calls a year ago. That one line is the shortest answer anyone will give you about who owns your website, and for a lot of small companies it is not the answer they expect.
Four Things, Four Names
A website is not one asset. It is four, and they are held in four different places. The domain sits in a registrar account. The hosting sits in a server account with a billing contact on it. The code sits in files that carry a copyright and, usually, a stack of third party licenses. The content sits with whoever shot the photos and wrote the words.
Nothing forces those four into the same name. On a typical small business site they are not. The common arrangement goes like this. The designer registers the domain on his own account because it was faster that morning. He puts the site on his reseller hosting because he already pays for the plan. He builds it on a framework he uses for every client. He buys the stock photos on his own license. Four for four, in his name, and nobody did anything wrong on day one.
That is the part owners miss. There is no villain in most of these stories, just a set of small conveniences that were never written down, and they hold up fine right until the relationship ends.
Nothing forces those four into the same name, and on most small sites they are not.
The Domain Is The One That Takes Your Email With It
Of the four, the domain is the cheapest and the most dangerous. It costs about twenty dollars a year. It also decides where your website points and where your mail is delivered. Whoever can edit the DNS can move both in about five minutes. If you lose the domain you lose the mailbox in the same hour, and every invoice, every password reset and every customer reply goes with it.
Recovery is slow on purpose. Registrars apply a sixty day lock after a domain moves between registrars, and another after the registrant contact is changed. So even a friendly, fully cooperative handover can put you two months out from full control. A hostile one does not run on a schedule at all.
Expiry is the other trapdoor. A lapsed domain sits in a grace period for roughly a month, then drops into redemption, where getting it back costs several times the renewal price. A twenty dollar renewal becomes a three figure recovery fee, and that is if nobody else takes it first. When you are buying domain names for small business, the registration belongs in the business name, on an account with an owner's email on it, renewing against an owner's card.
Hosting Makes You A Tenant
Reseller hosting is normal and mostly fine. Your designer buys a large plan and puts a dozen client sites on it. It is cheaper for everyone. It also means your site lives inside an account you do not hold, on a bill you do not pay, at a company that has never heard of you.
The host will only talk to the account holder. That is not them being difficult, it is the only sane policy they can have. So when the account lapses, or the card on it expires, or the holder decides to close the plan, your site goes dark and the number on the invoice is not yours to call.
The test is simple. If you cannot download a complete copy of your site today, files and database, without asking anyone for permission, you are renting. Uptime is the number that gets advertised, and it is worth reading honestly, since 99.9 percent of a year still leaves 8.8 hours of downtime. But an outage ends. A hosting account you cannot log into does not.
The Code Can Be Licensed To You Instead Of Owned By You
Here is the unwelcome one. When you hire an outside contractor to build something, the copyright in what they write generally belongs to them unless a written agreement says otherwise. Paying the invoice buys you the right to use the site. It does not automatically buy the code. Most small website contracts never address it at all. That is the common default rather than advice about your particular deal, and it is worth reading whatever you signed.
The practical version bites harder than the legal one. A site built on a proprietary in house CMS only runs on the builder's server. The admin panel lives on his domain. Export it and you get flat pages with no way to edit them. Themes, plugins, fonts and stock images bought on the developer's license do not travel with the files, so a clean handover can quietly turn into a licensing problem.
Most of the hours that go into taking over a website you did not set up are spent on exactly this, sorting the parts that can come along from the parts that have to be rebuilt or bought again.
The Fallout Is When You Find Out Who Owns Your Website
Nobody audits any of this while things are going well. It surfaces during a fallout. A disputed invoice. A designer who takes a full time job and stops replying. A relative who moved away. An agency that closed. The trigger is almost always ordinary, and the discovery is always the same, which is that the person holding the keys is no longer motivated to hand them over.
Outright ransom is rare. Silence is common, and silence works just as well. An unanswered email is functionally identical to a refusal, and there is no support line for a person who used to help you.
The timing tends to be cruel. It shows up the week you print new cards, or the morning the site goes down, or in the middle of a rebrand, when the domain is on the truck, the door and every listing you have. Starting over on a new address is not just a new site. It is every printed thing, every listing, and every link anyone ever made to you.
An unanswered email is functionally identical to a refusal.
Ownership Is Four Logins, Not A Feeling
Ownership is provable, and proving it takes about ten minutes. You can log into the registrar and see your business on the account. You can log into the host. You can download the files and the database. You have the original photos on a drive you control. If all four are true, the worst any fallout can cost you is time.
Check the account, not the public record. Registrars redact contact details on most public listings now, so a WHOIS lookup may show a privacy service and tell you nothing useful. The account the domain sits in is the real answer, and the login is the only proof of it.
None of this is a judgment on the people who built your site. Most of them are honest and most handovers are polite. But a good relationship is not a form of ownership, and the vendor worth keeping is the one who is comfortable being replaced. The correct answer to a request for your own logins is short, and it starts with "here are your logins."
Four names, four doors, and the only day any of it matters is the day somebody stops opening one. The check is not complicated and it is never urgent, which is exactly why it does not get done. Look at the registrar account, look at the hosting account, read whatever you signed, and find the folder your photos are in. Whatever you turn up, you would rather turn it up on a slow Tuesday than on the morning your email stops arriving.
More from the blog
- What Unlimited Hosting Really Means
- The First Hour When Your Site Goes Down
- Why Your Business Email Goes to Spam
All posts are on the blog. For the step by step versions, see the domain and hosting guides.