TL;DR
You own your website when four things are in your name: the domain, the hosting account, the code and the Google Business Profile. Most small businesses hold one or two of those. The rest sit with an agency, and the gap shows up the day you try to leave. Managed-platform agencies keep the site when you cancel, and even a WordPress site you "own" needs a developer to move. Check the four items this week, ask the five contract questions below before you sign anything new, and if you are switching agencies, get the files and the listing back before you cancel, not after.
An owner on a strategy call last week pushed back when we said every plan includes a website we build. Fair question, and the honest answer is that it depends entirely on who holds the keys afterward. Some agencies build the site so they can keep it. We build it so you can take it. This guide covers how to tell the difference, what to check on the site you have now, and how to get everything back when you leave an agency that would rather you did not.
The three ways a website can be "yours"
"Do I own my website" has three different answers depending on how it was built, and the sales call rarely says which one you are getting.
| Model | What you actually hold | What happens when you leave | Who sells it |
|---|---|---|---|
| Owned outright | The domain, the hosting account, the source code and the content, all registered or stored under your company's name | You take it and host it anywhere. Any developer, or you with an AI coding tool, can keep working on it | Freelancers who hand over files, and agencies that build in plain code. This is our model |
| Rented | The domain, at best. The site lives on the agency's platform and is edited only through their system | The site goes dark on your cancellation date. You rebuild from scratch, usually under time pressure | Managed-platform programs at $1,200 to $2,500 a month on 24-month contracts. Scorpion and Thryv are the two we get asked about most |
| Owned on paper | A WordPress site on the agency's hosting, with a premium theme and plugins licensed to the agency | You get a zip file. The plugin licenses lapse, the theme stops updating, and moving it needs a developer and a weekend | Most local web shops |
| Verdict | Rented is the one to avoid, and "owned on paper" is the one most owners mistake for the real thing. Ask where the code is and who can log in to the registrar before you ask about the design. | ||
Five things to check this week
Each of these takes ten minutes. If you cannot answer one, that is the thing a departing agency will hold over you.
1. Who is the registrant on your domain?
Go to your registrar (GoDaddy, Namecheap, Google Domains, Cloudflare) and log in. If you do not know which registrar it is, a WHOIS lookup tells you, and if the registrant is your agency's name or a privacy proxy you did not set up, the domain is not yours in any practical sense. The domain is the one asset that cannot be rebuilt. Everything else can.
2. Who holds the hosting account?
Hosting under the agency's account means the agency can switch the site off. Hosting under your account, with the agency added as a user, means you can remove them. The second arrangement costs nothing extra and most agencies will agree to it if asked before the build. Few offer it unasked.
3. Where is the code?
For a custom site, the answer should be a repository (GitHub or similar) under your company's name, with the agency as a collaborator. For WordPress, it is the site files plus the database, which you should be able to export yourself from the hosting panel. If the answer is "it is in our system," you are renting.
4. Who is the primary owner of your Google Business Profile?
Open the profile, go to the people and access settings, and check whether your email is the primary owner. Agencies routinely make themselves primary owner during setup. A complaint on the BBB in June 2026 about getting a profile back after leaving one of the platforms above took until July to resolve. Make yourself primary owner today and leave the agency as a manager.
5. Who owns the content and the photos?
Your own job photos are yours. Stock photos were licensed to whoever bought them, which is usually the agency, and that license may not transfer. Written content is the grey area: in the United States, copyright in custom design or copy created by an outside contractor stays with the contractor unless the contract assigns it to you in writing. Read your agreement for an assignment clause, and if there is none, ask for one. This is general information, not legal advice.
Not sure what your current site is leaking?
The free website audit is a 10-minute recording of your site through a homeowner's eyes plus a written report. It also flags the ownership gaps above.
Five questions to ask before you sign with any agency
- "Where does the code live, and whose name is on it?" The only acceptable answers are a repository or hosting account in your name, or files you can export without asking.
- "What is the transition period after I cancel?" Thirty days is the minimum. A BBB complaint filed December 8, 2025 against one managed platform describes an insufficient window to move the site after cancellation. Get the number in the contract.
- "Who is the registrant on the domain and the primary owner of the Google listing?" You, in both cases, from day one.
- "What happens to the theme and plugin licenses?" On WordPress, premium licenses are usually held by the agency. Ask whether they transfer or whether you will be buying them again.
- "What does the exit look like, in writing?" Files, database, logins, a hand-off call. If the account manager cannot describe it, nobody has done it cleanly before.
Our guide to agency pricing transparency covers the money side of the same conversation.
How to get your site back when you leave
In this order. The mistake owners make is cancelling first and asking for the files second, which hands the agency every card in the deck.
- Confirm the domain registrar and get the login. If the domain is in the agency's name, request a transfer to a registrar account you control, and do not cancel anything until it clears.
- Request a full export in writing: site files and the database for WordPress, or repository access for a custom site. Keep the email.
- Set up new hosting under your own account and move the site there, or have the next agency do it as part of their build.
- Make yourself primary owner of the Google Business Profile, Google Ads, Analytics and any tag manager account. Then remove the agency.
- Download your photos, reviews and any content you paid for.
- Now cancel, with the transition period in writing.
If the agency is one of the rented-platform programs, step two will come back with "we cannot export it," and the realistic plan is a rebuild that launches before the cancellation date. The website redesign cost guide prices that, and how much a contractor website should cost shows where the market sits.
The security reason this matters more than it used to
Ownership used to be a question for the day you left. It is now a question every month, because the site you "own on paper" is usually a WordPress install somebody else has to keep patched. On October 21, 2026, PHP shipped an emergency release for two flaws, CVE-2026-109618 and CVE-2026-109619, each rated 9.2 out of 10, that let an attacker run code on a server without logging in. WordPress.org said no WordPress update was required, which meant the fix depended entirely on the host updating PHP. Cloudflare's chief executive reported thousands of exploit attempts before the announcement and millions by the next day. If you do not know who runs your hosting, you did not know whether your site was patched that week.
The broader picture is the same. Patchstack counted 11,334 new vulnerabilities across WordPress plugins, themes and core in 2025, up 42 percent on 2024, with 91 percent of them in plugins and 46 percent unpatched by the developer at the time of disclosure. Six were in WordPress core. A plugin-free site is not on that list, which is one of the reasons we build without one; the case against a content management system for most small sites is in do you need a CMS.
Why we build the site and still hand you the keys
Every Skill Mammoth plan includes a site we build, and the owner on last week's call heard that as lock-in. It is the opposite. The code sits in a repository under your company's name, the domain is registered to you, and the content and data are yours. If you leave, you take all of it and run it with any developer, or with Claude Code or Codex yourself. We insist on building it for one reason: we can only trace every lead and stand behind the results on a site we control. The full reasoning, with the objections we hear on calls, is on why we build your website, and the prices are on the pricing page: websites from $1,000, the Smart Website at $3,000 or $150 a month on Easy Start, and plans from $350 a month with hosting, security and updates included.
Leaving an agency and not sure what you will get back?
Book a 30-minute call. We will walk the five checks with you, tell you what to request before you cancel, and quote the rebuild only if you need one.
Frequently asked questions
Who owns a website, legally?
Three separate things. The domain belongs to whoever is listed as registrant. The hosting belongs to whoever holds the hosting account. The design, code and copy are copyrighted by whoever created them, and in the United States that stays with an outside contractor unless the contract assigns it to the client in writing. Check all three; owning one does not give you the other two.
Can an agency keep my website if I cancel?
If the site lives on the agency's own platform, yes, and the contract usually says so. If it is a WordPress site on their hosting, they must hand over the files on request but can let premium plugin and theme licenses lapse. If the code is in a repository or hosting account under your name, no.
What happens to my website if I leave Scorpion or Thryv?
Both run managed platforms, so the site does not move with you. Plan a rebuild that launches before the cancellation date, and chase ownership of the Google Business Profile and ad accounts separately. The complaint patterns are in our Scorpion review and Thryv review.
Do I own my WordPress site?
Usually the files and the content, yes. Often not the hosting account, the premium theme or the plugin licenses, which were bought by the agency. You can take the site, but keeping it running somewhere else takes a developer and some new licenses.
How long should the transition period be after cancelling?
Thirty days at minimum, in the contract. That is enough to export the site, move the domain, take over the Google listing and launch a replacement if one is needed.
Does Skill Mammoth let me take the website if I leave?
Yes. The repository is under your name, the domain is yours, and so are the content and the data. On Easy Start you pay off the remaining balance and walk with everything. There is nothing to export because nothing was ever locked up.