Spectre Insights
Who Should Own the Logins? A Simple Ownership Map for Owners
You hired help for the website or the ads. Months later you are not sure whose email controls the domain, who can log into Google Ads, or what happens if the relationship ends.
That uncertainty is how owners get stranded. It is also one of the clearest money-grab patterns—see real partner vs money grab.
This is a simple ownership map: what the business should keep, what a helper can manage, and how to check without becoming an IT person.
The rule in one sentence
Your business owns the keys. Helpers get access. Access can be removed without losing the house.
If leaving a vendor means losing the Ads history, the website, or the domain, ownership was upside down.
The ownership map (owner vs helper)
| Asset | Owner (business) should keep | Helper can do |
|---|---|---|
| Domain (yourname.com) | Registrar login; ability to renew and move DNS | Advise DNS; request records—not hold the only login |
| Hosting / website CMS | Admin user on your host or site | Editor/admin help; builds and updates under your account |
| Google Ads | Account under your business; billing visibility; ability to add/remove users | Daily optimization as a user you invited |
| Analytics / Google Tag Manager | Property/container under a business-controlled Google account or Manager pattern you understand | Setup and tagging as a permitted user |
| Business email | Mailboxes on a domain you control | Help configure—not “we host your only inbox forever” by default |
| Call tracking (if used) | Account access and number inventory you can export or port with a plan | Setup and reporting help |
| Google Business Profile | Manager access tied to the business | Edits as a manager you can remove |
You do not need to click every button yourself. You need the ability to keep the asset when people change.
Print-friendly detail lives under Resources (ownership checklist). The deeper doctrine piece is What a Business Owner Should Actually Own.
Domain and hosting (the “house and lot”)
The domain is the address. Hosting is where the site files live.
Healthy pattern:
- Domain renews on a registrar account your business can access (even if a helper manages DNS day to day)
- Website lives on hosting or a CMS where your business has an admin user
- You know where invoices for domain and host go
Warning pattern:
- “We registered it under our agency account for convenience”
- Only the vendor can renew or unlock the domain
- Site backups and export rights are unclear
If the relationship ends, you should still be able to point the domain and keep the site online with a new helper.
Google Ads (the meter and the history)
Healthy pattern:
- Ads account is yours (or clearly under your Manager Account structure with you as admin)
- You can see billing
- You can add a new partner later without rebuilding from zero
Warning pattern:
- Campaigns live only inside the agency’s account
- You never received admin invite
- Leaving means starting over with no history
Serious management still has a defined scope—what Google Ads management actually includes—but scope is not ownership. Helpers optimize; owners keep the account.
Analytics and Tag Manager (the measuring tools)
Healthy pattern:
- Analytics property and (when used) Tag Manager container sit under access your business controls
- You can grant a new contractor permission without begging for exports
Warning pattern:
- Tracking “belongs” only to a vendor login
- Nobody can explain where conversion tags live
- You cannot verify a test conversion yourself or with a new helper
You may not use every tool on day one. When you do, ownership still applies. Readiness context: what you need before spending.
Email and Google Business Profile
Email on your domain is part of how customers trust you. GBP is how many local searchers call you.
Healthy pattern:
- Mailboxes you can recover
- GBP managers you can add or remove
- No single contractor as the only “owner” of the listing with no succession path
Warning pattern:
- Customer mail only exists inside a vendor tool you cannot leave
- Listing claimed under a personal login nobody can recover
A ten-minute ownership sniff test
Ask yourself (or your vendor) today:
- Can I log into the domain registrar without emailing anyone?
- Do I have an admin on the website?
- Am I an admin on Google Ads with billing visibility?
- Can I see Analytics / Tag Manager (if we use them)?
- If we parted ways in 30 days, what would we keep?
If several answers are “I don’t know,” pause new spend and fix access first. That is adult risk management—not paranoia. Pair with the green/red flags in real partner vs money grab and the trust door in ads feel like a scam — how to start.
How to clean this up without a fight
Stay calm and specific:
- “Please invite our business email as admin on Ads, Analytics, and the site.”
- “Please transfer domain lock/owner to our registrar login.”
- “Please confirm GBP managers and remove old personal owners we do not recognize.”
A real partner helps you finish that list. Resistance, fog, or “we can’t for policy reasons” without a written alternative is a signal. Prefer a focused Ads & Tracking Review or infrastructure conversation over another vague retainer while keys are missing.
For broader stack help (hosting, access hygiene, handoff), see infrastructure.
Related: What a business owner should own · What Google Ads management includes · “I Need More Customers but Ads Feel Like a Scam” — How to Start Witho… · How to Tell a Real Marketing Partner from a Money Grab