Who Owns Your Website When You Leave Your Web Designer?

What does "owning your website" actually mean?

A business website is at least five separate assets, and each one has a different owner of record.

The domain is a registration with an ICANN-accredited registrar. Hosting is a contract with whoever runs the server. The design, text and code are covered by copyright. Business Profile, Search Console, Analytics and Ads each have their own permission system. Then there's the glue: DNS settings, email routing, the form that texts leads to your phone.

The invoice you paid doesn't change who is listed as owner in any of those systems. Google and your registrar go by their records, not your receipts.

Most designers aren't trying to trap anyone. They set things up in their own accounts because it was faster, and nobody moved them. You find out you're a guest in your own house when the relationship ends or the designer closes shop.

Who owns the domain name?

The registrant owns it. ICANN calls this person the Registered Name Holder, and its Transfer Policy says the Registered Name Holder and the Administrative Contact are "the only parties that have the authority to approve or deny a transfer request," and in a dispute the Registered Name Holder's authority wins (ICANN Transfer Policy, updated February 2024).

If the registrant field shows your designer's company and email, they hold the authority, even if you paid every renewal.

ICANN also puts duties on the registrant. Its published list of registrant responsibilities says you must give accurate contact information, update it promptly when it changes, and respond to your registrar within 15 days (ICANN Registrants' Benefits and Responsibilities).

To check, log in wherever the domain renews and look at the registrant contact. If you don't know where that is, ICANN's public lookup tool (lookup.icann.org) shows the registrar. If it's one you've never paid directly, someone else holds the account.

Can my web designer refuse to hand over my domain?

It depends on who the registrant is, and this is where the rules are better for owners than most people realize.

If you are the registrant, the registrar has to cooperate. The policy says registrars must give the Registered Name Holder the unique transfer code (ICANN calls it the "AuthInfo" code) and remove the transfer lock within 5 calendar days of the first request, unless they let you do it yourself in the control panel. They also may not refuse to release that code "solely because there is a dispute" over payment between you and the registrar (ICANN Transfer Policy, 2024).

Note the fine print. That payment protection covers disputes with the registrar, not with your web designer. If the designer is the registrant, the registrar treats them as owner, and your fight is a contract dispute.

A registrar can deny a transfer for a short list of reasons, including fraud, a dispute over who the registrant is, or a domain created or transferred in the last 60 days.

Most designers hand the domain over when asked politely in writing. The rare holdout usually wants an unpaid bill settled. If the bill is real, paying it is often cheaper than a lawyer. If it isn't, your paper trail of who paid the renewals will matter.

The 60-day lock that catches people off guard

Here's the trap. Many owners discover the domain is in the designer's name and ask the designer to change the registrant to the business. Good instinct. But under the current policy, a change of registrant triggers a 60-day lock on moving the domain to another registrar, unless the registrar offered an opt-out and you took it before the change (ICANN Transfer Policy, 2024).

The policy tells registrars to warn the old registrant that if the goal is a new registrar, move registrars first and change the registrant second. So ask the designer to start the transfer, or push the domain into your account at the same registrar, before anyone edits names and emails.

This rule may get shorter. ICANN's policy council approved 47 recommended changes to the Transfer Policy in March 2025, and under the first two scenarios domains would be locked for 720 hours, or 30 days, instead of the 60 days common today (Safenames, April 2025). We could not find an official ICANN page confirming an effective date for the new version, and ICANN's own current policy page still carries the 60-day rules. Plan around 60 days until your registrar tells you otherwise.

What happens if the domain expires on the designer's credit card?

This is how a lot of sites go dark, and it's usually an accident. The designer's card expires or they close up shop, and the renewal email lands in an inbox nobody reads.

ICANN's Expired Registration Recovery Policy sets some guardrails. Registrars have to send at least two notices before expiration, one about a month out and one about a week out, plus another within five days after it expires. For at least the last eight days the domain can still be renewed, the registrar has to break its DNS resolution, which means your website and often your email stop working. After deletion, most generic domains get a 30-day Redemption Grace Period when the registrar that deleted it can still restore it (ICANN Expired Registration Recovery Policy).

Every notice goes to the registrant. If that's your old designer, the first warning you get is a customer saying your site is down in July, when the AC calls are stacking up.

The fix is boring. Put the domain in your own account, turn on auto-renew with a company card, set the contact email to an owner's address, and renew for several years. A registrar transfer adds one year to the existing term, as long as the total unexpired term stays at ten years or less (ICANN Transfer Policy, 2024).

Do I own the design, photos and code I paid for?

Not automatically. This part is copyright, not Google or ICANN.

The U.S. Copyright Office explains that ordinarily the person who creates a work is its author and owner. A "work made for hire" flips that, and it happens in only two ways: an employee creates it within the scope of the job, or a commissioned work falls into one of nine specific categories and both parties sign a written agreement that expressly calls it a work made for hire. If a commissioned work fails any of those requirements, "it is not a work made for hire" (U.S. Copyright Office, Circular 30: Works Made for Hire).

The categories include compilations, translations, instructional texts and parts of audiovisual works. A small business website doesn't fit neatly into that list. So a freelancer or agency you hire as a contractor generally keeps the copyright in what they create unless your contract transfers it to you in writing.

That's our reading of a government circular, not legal advice; have an Arizona business attorney review any contract that matters. The practical takeaway: your contract should say that on final payment the designer assigns you all rights in the custom work made for your site, and it should list what's excluded: licensed fonts, stock photos, plugins and the designer's reusable code, which you get a license to use instead.

Much of the software underneath isn't yours or theirs. W3Techs reports WordPress runs on 39.5% of all websites and 58.2% of sites whose content system it can identify (W3Techs, November 2026). The core software is free to use. The real questions are whether you hold an admin login, whether paid plugin licenses are in your name or the agency's, and whether you can get a full backup file.

Who should own Google Business Profile, Search Console, Analytics and Ads?

You, with your agency added as a user. Each Google product has its own owner role, and each one has a quirk worth knowing.

Google Business Profile. A profile can have many owners but only one primary owner. Managers can edit nearly everything, but only owners can add or remove users or delete the profile. New owners also have to wait 7 days before they can transfer primary ownership or remove other owners (Google Business Profile Help: Manage owners and managers). That 7-day wait is why you should fix this before a breakup, not during one. Your profile drives calls and reviews, so this is the account to lock down first. Any decent agency, including our reputation management agent, only needs manager access.

Search Console. Google separates verified owners, who proved ownership with a token such as an HTML file, meta tag or DNS record, from delegated owners added by another owner. If all verified owners are removed, everyone else loses access after a grace period. The catch: when you remove an owner, their verification tokens are not deleted, and as long as a token stays on your site or in your DNS, the removed person can re-verify and get back in (Search Console Help: Managing owners, users, and permissions). Removing the user isn't enough. You also have to delete the token.

Google Analytics. You need the Administrator role to add or change users, and Administrator at the account level to delete them (Analytics Help: Add, edit, and delete users).

Google Ads. Only Admin access can give account access, change access levels, unlink manager accounts and review each user's last login (Google Ads Help: About access levels). The ad account holds your conversion history, which Google's bidding learns from. An agency that owns the account can walk off with years of it. Whoever runs your ads, including our own Google Ads agent, should work inside an account where your business is Admin.

Here's the whole picture in one table, set up the way we'd want it if it were our business.

If you're not sure where you stand on any row, that's what our free audit is for. We'll tell you which accounts you control and which you don't, whether or not you ever hire us.

How do I take back control without breaking anything?

Order matters. Done out of sequence, a few of these steps can take your site or email offline.

First, inventory. Write down your domain, registrar, host, where your email runs and which Google accounts exist. If your email uses the same domain, a DNS mistake can kill email as easily as the website.

Second, ask for owner access in writing, one account at a time, starting with Google Business Profile and Google Ads. Keep the designer as a user until the handoff is done.

Third, the domain. Same registrar? Ask for an account-to-account push. New registrar? Transfer first, change the registrant second, so you dodge the 60-day lock.

Fourth, get a full backup of the site files and database before any hosting move. Then verify yourself in Search Console with your own token, and remove old owners and their tokens once everything works. Google Search Central's short video on verification methods is worth watching before you touch DNS. Pay attention to the DNS method, since it survives a website rebuild:

Last, submit your own contact form and call your tracking number. A handoff that breaks lead notifications costs more than the whole fight was worth.

What we would do

If you own a service business and you aren't sure who controls these accounts, here's our advice, in order.

Spend one hour this week on the domain and Google Business Profile. They hurt most to lose and have the slowest fixes. The rest can wait a week.

Before you sign with any web designer or agency, us included, put three sentences in the contract: the domain is registered to your business, you hold owner or admin access on every Google account, and the custom work is assigned to you on final payment. A good shop agrees right away. Hesitation tells you how the breakup will go. Our list of questions to ask a web design agency before you sign covers the rest.

Don't fire your designer just because the accounts are in their name. Get the transfers done and keep working with them if the work is good. We'd rather you stay with a decent freelancer who hands you the keys than switch to us for the wrong reason.

And when we would not sell you a rebuild: if your site loads fast, brings in calls, and you now hold every account in the table above, you don't need a new website. Fix ownership, keep the site. A rebuild makes sense when the platform itself is the problem, like the plugin sprawl we describe in the hidden costs of WordPress for service businesses. Our services and pricing pages lay out what that costs if you get there.

Questions owners ask

My designer registered the domain in their own name. Is it legally mine?

For transfers, the registrar treats the listed registrant as the owner. If you paid for it and have proof, you may have a contract claim against the designer, but the fast fix is asking them to move it into your account.

How long does it take to move a domain to my own account?

A push between accounts at the same registrar can happen the same day. A transfer between registrars depends on the transfer code, which the registrar must provide within 5 calendar days if you can't get it yourself, plus up to 5 days for the old registrar to respond. Domains created or transferred in the last 60 days can be refused.

Will changing the domain owner take my website down?

Changing the registrant or registrar doesn't change DNS settings by itself. Outages come from someone editing DNS records or nameservers during the move, so copy your current records first.

Do I own my website design if I paid for it?

Not automatically. Under copyright law, a contractor usually keeps the copyright unless a signed written agreement transfers it. Ask for an assignment of the custom work on final payment, and have an attorney look at the wording.

Should my marketing agency be the owner of my Google Business Profile?

No. You should be primary owner and the agency a manager. Managers can post, add photos and reply to reviews, but they can't remove you or delete the profile.

I removed my old agency from Search Console. Can they get back in?

Possibly. Google says removing an owner doesn't delete their verification tokens, so a leftover HTML file, meta tag or DNS record lets them re-verify. Check "Unused ownership tokens" and remove them.

Sources

• ICANN: Transfer Policy, updated version (2024)
• ICANN: Registrants' Benefits and Responsibilities (2013)
• ICANN: Expired Registration Recovery Policy (2013)
• Safenames: How will proposed changes to ICANN's Transfer Policy affect domain owners? (2025)
• U.S. Copyright Office: Circular 30, Works Made for Hire
• Google Search Console Help: Managing owners, users, and permissions (2026)
• Google Business Profile Help: Manage your Business Profile owners and managers (2026)
• Google Analytics Help: Add, edit, and delete users and user groups (2026)
• Google Ads Help: About access levels in your Google Ads account (2026)
• W3Techs: Usage statistics and market share of WordPress (November 2026)