Why Is Your Domain the Only Thing Online You Actually Own?
Article

Why Is Your Domain the Only Thing Online You Actually Own?

Your Instagram following, your Gmail address, your Shopify storefront, your YouTube channel — none of it is yours in any legal sense that matters. A domain name is the closest thing to property the internet gives you, and even that is a lease with an asterisk.

Published August 30, 202610 min readUpdated Aug 30, 2026

Written by · Full-Stack Agentic AI Software Engineer — AI Agents, Automation & Revenue Systems for GTM/RevOps teams

In brief

Of everything a business or a person builds online — a social following, an email address, a storefront, a domain — which of it is actually owned, in a sense a court would recognize?

Almost none of it, except the domain, and even the domain comes with conditions. A Facebook page, a Gmail address, a Shopify store, a YouTube channel: all of these are accounts you are licensed to use under a terms-of-service agreement the platform can amend or terminate. Amazon suspended Parler's entire AWS account on 24 hours' notice in January 2021, citing its own acceptable-use policy. Meta disables business accounts with no phone line to call and no obligation to explain why. Apple terminated Epic Games' developer account over a payment-processing dispute in August 2020. A registered domain name is different in one specific, legally tested way: in Kremen v. Cohen, the Ninth Circuit ruled in 2003 that a domain name is a form of intangible property that can be stolen and converted, not merely a service relationship — a distinction that let Gary Kremen sue Network Solutions for handing sex.com to a con artist on a forged fax. But 'property' here is still built on ICANN policy and a renewal habit, not a title deed. Own the domain, and you own the one thing that routes to whatever you build next. Lose it, or forget to renew it, and you own nothing at the address everyone already knows.

  • A domain name is the only online asset with a legal precedent (Kremen v. Cohen, 9th Cir. 2003) establishing it as property subject to theft and conversion claims, not just a revocable service
  • Every platform account — social, email, storefront, cloud hosting — is governed by a terms-of-service contract the provider can suspend unilaterally, as Amazon did to Parler with roughly 24 hours' notice in January 2021
  • Domain ownership is still conditional: ICANN accreditation rules, a 60-day post-transfer lock, and a registrar relationship all sit between you and the registry
  • Registering a domain doesn't buy you independence from platforms if everything the domain points to still lives on someone else's infrastructure
  • The practical test for 'do I own this' is whether you can move it to a new provider without anyone's permission — a domain passes that test with friction; a social account usually does not pass it at all

Evidence notes

Kremen v. Cohen, 337 F.3d 1024 (9th Cir. 2003)

Gary Kremen registered sex.com in 1994. Stephen Cohen sent Network Solutions a forged letter claiming Kremen's company wished to relinquish the domain; Network Solutions transferred it without verifying the request. The district court awarded Kremen the domain plus $65 million in damages ($40M compensatory, $25M punitive) against Cohen. The Ninth Circuit went further and held that Kremen could also sue Network Solutions for conversion, ruling that a domain name is intangible property capable of being converted — the legal foundation for treating a domain as something that can be owned and stolen, not merely a contractual service.

Amazon Web Services suspension of Parler, January 2021

AWS notified Parler on January 9, 2021 that it would suspend hosting effective the night of January 10, citing violations of AWS's Acceptable Use Policy over content that 'encouraged and incited violence.' Parler was down within about 24 hours of notice and sued AWS for breach of contract, arguing it was owed 30 days' notice under its agreement; the suspension nonetheless stood.

Epic Games v. Apple — Developer Program termination, August 2020

After Epic added a direct payment option to Fortnite in violation of App Store rules on August 13, 2020, Apple removed the app the same day and, on August 17, notified Epic that its entire Apple Developer Program account — covering all of Epic's iOS and Mac apps, not just Fortnite — would be terminated on August 28 unless Epic reversed the change. Epic did not reverse it, and litigation over the terms continued for years afterward.

Panix.com domain hijacking, January 2005

On January 14, 2005, the domain of Panix, a working New York ISP, was transferred without authorization after a UK-based reseller submitted a fraudulent transfer request to the Australian registrar Melbourne IT, which failed to properly verify it. Panix recovered the domain within about two days, but customer email sent during the outage was lost. ICANN's chief registrar liaison called it one of the more serious breaches of policy by an accredited registrar the organization had seen.

ICANN Transfer Policy — 60-day post-registration and post-transfer locks

ICANN's Transfer Policy prohibits a domain transfer to a new registrar within 60 days of initial registration, within 60 days of a previous inter-registrar transfer, and within 60 days of certain registrant contact changes. This is a security measure against hijacking, but it is also a real constraint on how quickly a registrant can move a domain even when they hold clean title to it. ICANN approved removing the lock in late 2024; as of this writing it has not been implemented and the effective date is expected no earlier than 2026.

Continue with purpose

Ask a small business owner what they own online and you'll get a confident list: the Instagram page with nine thousand followers, the Gmail address customers reply to, the Shopify store, maybe a YouTube channel. Ask a lawyer the same question and the list gets much shorter, much faster.

None of that is owned. It's licensed, under terms you agreed to without reading, from a company that can amend those terms or end the relationship at its own discretion. What's actually owned — in the narrow, tested, legally recognized sense — is close to one thing: the domain name. And even that comes with more conditions than people assume. If digital ownership needs to survive contact with a marketing team, has the operational side. If digital ownership needs to survive contact with a marketing team, XenGrowth's growth engineering practice has the operational side.

What does it mean for something online to be 'yours'?

The useful legal question isn't sentimental — it's about who has to justify what. If a platform revokes your account, do they owe you a reason, a process, or compensation? For almost every account you use, the answer is no, beyond what their own terms of service happen to promise, and platforms write those terms.

The clearest test case is Kremen v. Cohen. Gary Kremen registered sex.com in 1994 — a domain that would go on to become extraordinarily valuable. In the mid-1990s, Stephen Cohen, a convicted con artist, sent Network Solutions a forged letter claiming Kremen's company wanted to give up the domain. Network Solutions didn't verify it. They just handed the domain to Cohen, who built a profitable pornography business on it for years.

Kremen sued Cohen directly and won — a district court ordered the domain returned and awarded him $65 million, $40 million compensatory and $25 million punitive. But the more consequential ruling came when Kremen went after Network Solutions itself. The Ninth Circuit's 2003 opinion held that Kremen could sue the registrar for conversion — the legal term for wrongfully taking someone's property. That required the court to first decide that a domain name is property at all, capable of being possessed and stolen, not merely a slot in someone's database. It said yes. There is a longer treatment of the operations side of this in . There is a longer treatment of the operations side of this in The XenGrowth resource library.

No equivalent ruling exists for a Facebook page. Nobody has successfully argued in court that a suspended Instagram account is 'property' Meta converted when it disabled the account. The account is a license to use Meta's service, revocable per the terms you accepted, and that is a fundamentally weaker legal position than 'this is mine and you took it.'

How fast can a platform actually take something away?

Faster than most people plan for. On January 9, 2021, Amazon Web Services told Parler it would suspend the company's hosting, effective the night of January 10 — citing a pattern of content on the platform that violated AWS's Acceptable Use Policy against posts that 'encouraged and incited violence.' That's roughly a day's notice to an entire company's infrastructure. Parler sued, arguing its contract entitled it to 30 days, and thesuspension went ahead anyway, reported the same week by outlets from TechCrunch to Al Jazeera. Apple and Google had already pulled Parler's app from their stores days earlier.

Apple did something structurally similar to Epic Games seven months earlier, in a dispute over money rather than content moderation. When Epic added a direct payment option to Fortnite on August 13, 2020, defying App Store rules, Apple pulled the app the same day. Then, on August 17, Apple told Epic its entire Developer Program account — the credential behind every app Epic ships on iOS and Mac, not just Fortnite — would be terminated on August 28 unless Epic reversed course. That is the difference between losing one product and losing a company's entire distribution channel on a platform, over a single contract dispute, with about eleven days' notice.

Asset

What you actually hold

Who can end it, and how fast

Domain name

A registration recognized as property (Kremen v. Cohen), renewable, transferable between registrars

Registrar can suspend for abuse or non-payment; a hijacker can forge a transfer request; you can lose it by simply not renewing

Social media account

A revocable license under the platform's terms of service

Platform can disable it unilaterally, often with no phone support and no stated reason, as widely reported for Meta business accounts

Cloud hosting account

A revocable service contract

Provider can suspend for a terms-of-service violation on roughly a day's notice, as AWS did to Parler in January 2021

App store developer account

A revocable license to distribute software on that platform

Platform can terminate the whole account over one product's rule violation, as Apple did to Epic Games in August 2020

Gmail / platform email address

A revocable license tied to an account the provider controls

Provider can lock the account for a security flag with no live human to appeal to, per years of user reports in Google's own support forums

Question to ask

Domain name

Typical platform account

Can you move it to a new provider on your own initiative?

Yes, with a transfer request and a 60-day waiting window in some cases

No — you can close the account, but not migrate the account itself elsewhere

Does a court recognize it as property you can be robbed of?

Yes, per Kremen v. Cohen's conversion ruling

Not established — a suspended account is a breach-of-contract claim at best

Who decides the rules that govern it?

ICANN policy, applied uniformly across registrars

The platform alone, via terms of service it can amend unilaterally

What happens if you stop paying?

A defined grace period, then deletion — a known, published timeline

Immediate loss of access; most platforms publish no comparable grace period for account fees

Isn't the domain itself just another rented thing?

Partly, yes, and it's worth being honest about that rather than overselling domain ownership as some kind of absolute deed. You don't own the .com namespace; Verisign operates the registry under contract with ICANN, and ICANN accredits the registrars who sell you registrations. What you hold is a registration recognized as property under the reasoning in Kremen v. Cohen, renewable on a schedule, subject to ICANN policy, and transferable — with friction — between registrars. works through AI agents and marketing automation in more operational detail. XenGrowth on AI agents and marketing automation works through AI agents and marketing automation in more operational detail.

That friction is real. ICANN's Transfer Policy locks a domain from moving to a new registrar for 60 days after initial registration, after any prior inter-registrar transfer, and after certain changes to the registrant's contact details — a rule designed to slow down hijackers, which also slows down you. ICANN approved eliminating this lock in late 2024, but implementation isn't expected before 2026, so it still applies today.

None of that erases the difference. A 60-day wait to switch registrars is friction on an asset you hold. A one-day suspension of an AWS account, or a disabled Instagram page with no appeals contact, is the asset simply not being yours to move at all.

There's a second, quieter condition worth naming: a registrar itself can still get the process wrong, the way Network Solutions did with sex.com, or the way a UK-based reseller and an Australian registrar called Melbourne IT got it wrong with panix.com in January 2005, when a forged transfer request moved a working ISP's domain out from under it in a single business day. Panix got the domain back within about two days, and ICANN called the episode one of the more serious policy breaches by an accredited registrar it had seen. Ownership recognized in law is not the same as ownership immune to a bad afternoon at your registrar's front desk.

Why does the domain sit at the center of everything else?

Because it's the one asset that can point anywhere. If your Shopify store gets suspended, your domain can point to a new store tomorrow. If your email provider locks your account, mail for your domain can be rerouted to a new provider once you regain access to your registrar. If your hosting is suspended the way Parler's was, a domain — held separately from the hosting account it happened to be pointed at — survives the suspension of everything downstream of it. For the AI search, GEO and discovery angle, see . For the AI search, GEO and discovery angle, see XenGrowth on AI search, GEO and discovery.

This is the practical reason the domain matters more than any account built on top of it: it's the address, not the building. Lose the building and you can rebuild elsewhere at the same address. Lose the address, and every account, every backlink, every business card pointing to it goes stale at once.

The domain is not special because it's more valuable than the accounts built on it. It's special because it's the only one of those things a court has ever agreed you can be robbed of.

What should you actually do with this distinction?

  1. Register the domain under an entity you control — a business or your own name, not an employee's personal account or an agency's account on your behalf — and keep the registrant contact information current, since that is who has legal standing if anything goes wrong

  2. Treat the domain and the hosting behind it as separable. Know, in advance, which provider you'd point DNS to if your current host suspended you tomorrow

  3. Don't build the core of a business identity — the address customers repeat to each other — on a platform-issued handle. A domain redirects when a platform doesn't renew its goodwill toward you; a suspended account has no redirect

  4. Read what your platform's terms of service actually say about termination before you depend on the account, not after. Most are written to require nothing of the provider beyond notice, and some — as Parler learned — don't even guarantee that in practice

  5. Accept that domain ownership itself has real limits — the 60-day transfer lock, ICANN accreditation rules, a renewal habit — and plan around those limits rather than assuming the word 'owned' means unconditional

None of this is an argument against using social platforms, cloud hosts or app stores — you generally have to, and the reach they offer is real. It's an argument for knowing which parts of your presence are actually yours to move and which parts exist entirely at someone else's discretion, so the decision about where to depend on a platform is made deliberately rather than by default. The commercial version of this same argument — that infrastructure choices carry business risk, not just technical tradeoffs — is one returns to often.

The uncomfortable finish is that even the domain isn't fully yours in the way a house deed is yours — it's a lease you keep renewing from a system built on top of ICANN policy, with a registrar in the middle who can still make mistakes. It's just the least-rented thing you've got. Everything downstream of it is rented in full. For a longer treatment of why infrastructure decisions carry real commercial risk, see Infrastructure Cost Is a Business Problem.

Further reading from XenGrowth

Where this work meets go-to-market

Thinking about which parts of your online presence you actually control? publishes operator guides on building the revenue side of a business on infrastructure you don't lose overnight.

Further reading from XenGrowth

Where this work meets go-to-market

writes for the teams who have to run digital ownership day to day.

Further reading from XenGrowth

Where this work meets go-to-market

the XenGrowth practice writes for the teams who have to run digital ownership day to day.

What do you actually control?

Five questions on which of your digital assets you truly own versus merely license. The distinctions are less obvious than they sound.

1 / 5
What did the Ninth Circuit rule in Kremen v. Cohen (2003) about domain names?

Apply this article

How to turn insights into execution

A practical sequence for teams turning concepts into production outcomes.

DomainsDNSDigital OwnershipVendor Lock-InBusiness RiskInfrastructureother

Audit your current state

Map the bottlenecks and constraints connected to the article’s core problem.

Choose one bounded change

Test the most useful recommendation on one workflow before widening the scope.

Measure what changed

Keep the parts that improve the work, document what failed, and make the next decision from evidence.

Next step

Need help applying this in your stack?

I can translate these patterns into a concrete implementation plan for your team.

Discuss implementationBack to blog

Replies usually within 24 hours.

Next Steps

Continue reading

How Do You Actually Choose a Domain Registrar?

GoDaddy will sell you a .com for a penny and renew it for over twenty dollars. Cloudflare sells the same domain at what it actually costs Verisign, with no markup, forever. Almost everything registrars compete on is noise next to that one number.

Navigate

Is Email on Your Own Domain Worth It Over a Gmail Address?

When an employee with a personal Gmail address leaves, they take every contact, every thread and every attachment with them. When someone with [email protected] leaves, the address stays exactly where it was, pointing at whoever replaces them.

Navigate

What's the Difference Between Renting and Owning Your Infrastructure?

A domain is a lease you renew on your own terms. A social account, a SaaS subscription, a hosted storefront is a lease the landlord can end on theirs. The difference was never about cost — it's about who holds the option to say no.

Navigate

How Do You Judge Exit Cost Before You Adopt a Platform?

Every platform pitch answers 'how easy is this to start?' Almost none answer 'how easy is this to leave?' — and the second question is the one that actually predicts what the relationship costs you three years in.

Navigate

Can Your Business Account Be Suspended Without Warning?

AWS gave Parler about a day's notice before cutting off its hosting. Twitter's API change killed a 12-year-old app with an update to a developer agreement. Neither company broke a law. Both simply decided, and the decision was final the moment it was made.

Navigate
  • What Does Vendor Lock-In Actually Cost You?

    Wix and Squarespace don't hide that they won't let you export your site — it's a known, published limitation, not a bug. Three years of work becomes a rebuild-from-scratch the day you want to leave, and the pricing that got you in never mentioned it.

  • What Actually Happens to Your Business If You Lose Your Domain?

    Regions Bank, the 22nd-largest bank in the US, took its own online banking offline for close to a week in 2013 by forgetting to renew a domain. Not a hack. Not a disaster. A calendar reminder nobody set.

  • What Happens If You Forget to Renew Your Domain?

    ICANN gives you 30 days to reclaim an expired domain before it's deleted, plus a policy requiring multiple warning notices. Regions Bank had all of that protection in 2013 and still went dark for a week, because the clock doesn't wait for the notices to be read.

  • What Do You Lose When Your Audience Lives on Someone Else's Platform?

    Tumblr lost nearly a third of its page views in two months after a single policy change in December 2018. Not because users left the internet — because the platform decided what they were allowed to see there, and the audience never belonged to anyone but the platform in the first place.

  • Who Controls Your DNS, and What Is That Control Worth?

    One DNS provider's bad Friday in October 2016 took Twitter, Netflix, Spotify and Reddit offline at once — not because any of them failed, but because they'd all quietly delegated the same single switch to the same single company.