Who Owns Your Domain and Analytics?

Most owners find out the answer at the worst possible moment. They have decided to leave the agency or freelancer who built the site. Somewhere in that conversation they learn the domain is registered under the vendor's name, the analytics property sits in a Google account nobody can reach, and the listing was verified at an address they have never seen.

Nothing is broken. It all works fine right up until it does not...the moment it stops is the moment you have the least room to fix it.

Account ownership is not a paperwork detail. It is the difference between a vendor change that takes two weeks and one that drags on for a season...in the bad version you lose company email for a day and the map listing for far longer.

What follows is the sequence I run when a client lands in this spot. It is unhurried at the front...most of the damage starts with a sharp message sent before anyone had the facts.

The Inventory You Build Quietly

Before you send anything, build a written inventory, one row per asset and one column for whoever holds the top level role on it. That role matters more than access...whoever holds it can remove everyone else.

• Domain: Registration and DNS hosting, which very often sit at two different providers.
• Email: Whoever holds super administrator on the Google Workspace or Microsoft tenant.
• Hosting: The server, the CMS administrator accounts, and deploy and/or repository access.
• Measurement: The analytics account, the tag manager container, the Search Console property.
• Listing: Google Business Profile, and whether the primary owner is a person or a group.
• Everything Else: Ad accounts, social business managers, call tracking numbers, third party scripts.

What You Can Check Alone

Most of this you can confirm without asking anyone.

• Registrar Lookup: Where the domain sits and when it expires, even behind privacy shielding.
• DNS Lookup: The nameservers on record, and where the mail is actually routing today.
• Page Source: Which measurement and container IDs fire on your own homepage right now.
• The Agreement: Whatever your contract already says about work product and termination.

Do all four before you send anything...what you already know should set the tone.

The Domain and the Email

Everything hangs off the domain...your site resolves through it, your mail routes through it, and verifying ownership anywhere else depends on it. You want the business named on the registration, on an account it controls.

The fastest path is often not a registrar transfer at all. If the current registrar is one you would have chosen anyway, ask for an internal account push...the domain moves to your account at the same registrar, the zone stays where it is, and nothing on the public internet changes.

If you do move registrars, capture the entire zone first:

• Addressing: A and AAAA records for every host that answers on the domain.
• Aliases: Each CNAME in the zone, including the ones nobody remembers adding.
• Mail Routing: MX records, plus every TXT record covering SPF, DKIM and DMARC.
• The Rest: SRV and CAA records, in the zones that happen to carry them.

Transfers often reset nameservers to the gaining registrar's defaults, and the failure mode is not a slow website...it is mail silently stopping. Cleaner still, move DNS to a provider you control before touching the registration.

Registrant changes and recent registrations can also trigger a lock that blocks transfers. You may not see that lock until you try...start earlier than feels necessary.

Analytics and Search Console Access

In analytics, ask for administrator access at the account level, not just the property, because an account administrator can remove a property administrator at will. Account level is ownership...property level is a courtesy that can be withdrawn.

If the vendor will not hand it over, accept that and move on...there is a second path and you can walk it without them. Historical data does not travel well, so export the reports you reference while you still have read access, meaning acquisition by channel, landing pages and conversions.

Then create a fresh property under an account the business owns, tag the site yourself, and run both for a while so you have overlap.

But the tag is a separate problem. If measurement runs through a tag manager container the vendor owns, they control what code executes on your pages...that is bigger than a reporting issue. Get it transferred, or replace it and strip the old snippet.

Search Console you can usually take back yourself...once you control DNS, verify a domain property with a TXT record in your zone. Nobody without DNS access can revoke that, and you can then remove the other owners.

The Listing That Takes Longest

The listing is usually the most contested item and always the slowest...start it early. While the relationship is still civil, ask the primary owner to transfer primary ownership to an account the business controls, then log in and confirm it landed.

When it is not civil, Google provides a request access flow. You submit a claim, the current owner gets a window to respond, and if they let it lapse access can be granted. It is neither fast nor guaranteed...set it moving sooner rather than later, while you work the domain.

Do not create a second listing because the first is stuck. Duplicates get merged or suspended...you can lose reviews, photos and history.

And check the phone number and website URL on the profile. If either points at a call tracking number or a landing page the vendor owns...that asset leaves when they do.

What the Next Vendor Registers

The rule is short...the business registers and the vendor gets invited. Every account is created under a company owned identity, and outside parties receive access rather than ownership.

• Identity: Register under a role based company address, never an employee's personal login.
• Credentials: A password manager the business administers, with company recovery contacts on file.
• Roles: Grant administrator or manager access, never primary owner and never sole super administrator.
• The Contract: Put account and work product ownership in the agreement itself, with a named offboarding list and a deadline attached to every item on that list.
• Audits: Walk the user list on every property on a schedule, removing anyone who left.

A good vendor will not blink at any of this...the ones who push back are telling you something useful about how the eventual exit will go.

Three Checks Worth Doing Today

These three cost nothing:

• Registrar: Run a lookup on your domain and note where it sits and when it expires.
• Tags: View your homepage source and write down the measurement and container IDs firing.
• Listing: Check who currently holds primary owner on your Google Business Profile.

The Order That Works Best

So work the sequence from there, not whichever account annoys you most.

• Domain: Registration and DNS before anything else, because the rest verifies through them.
• Search Console: Next, since a TXT record in your own zone needs nobody's permission.
• Analytics: After that, whether you inherit the old account or stand up a new one.
• The Listing: In parallel from the first day, because that request takes the longest.

When you contact the vendor, send one calm message naming each account and the exact role you want on it. A specific list gets acted on, and a general request for "our accounts" gets set aside...you have lost the week.

I think the calm version beats the firm one...a list naming the account and the role is easier to act on than a grievance.