What actually happens when someone visits your website
Five different companies each do one job. None of them does all of it. This explains
which is which, where to log in, and what to read if you want to understand one of them better.
No passwords appear anywhere in this document.
The visit, step by step
Someone types arborprostree.com into their phone. Here is the relay race that follows,
usually in under a second.
- Their phone asks "where is arborprostree.com?"
Nothing on the internet knows where a website lives by name. Every visit starts with a
lookup, like asking directory enquiries for a phone number.
- GoDaddy is the registrar — it owns the name, not the site
You rent the name
arborprostree.com from GoDaddy. Think of them as the county
clerk who records that the name is yours. They also hold the instruction for who answers
questions about it — and that instruction currently points at Cloudflare.
- Cloudflare answers the question
GoDaddy has handed the answering job to Cloudflare's nameservers
(
desi.ns.cloudflare.com and jermaine.ns.cloudflare.com). Cloudflare
replies with an address — and importantly, it gives out its own address, not your
web host's.
- The visitor's phone connects to Cloudflare, not to your website
This is the part that surprises people. Every visitor talks to Cloudflare first. Cloudflare
sits in front like a receptionist: it filters out attacks and bad bots, handles the padlock
(HTTPS), and decides what to do with the request.
- Cloudflare decides how to answer
It can hand back a ready-made page it is already holding (Pages), run a small piece of
code to build a custom answer (Workers), hand over a stored photo or file
(R2), or pass the request back to WordPress and relay the answer.
- WordPress is where the content actually lives
Your pages, blog posts and photos are stored in WordPress, hosted by GoDaddy. That is where
text gets written and edited. It is the filing cabinet, not the shop front.
- "Headless" means the filing cabinet and the shop front are separated
Content is still written in WordPress, but instead of WordPress building each page for every
visitor, we read the content out of it in advance (through something called the
REST API — a way for one system to ask another for data) and hand Cloudflare a set of
finished pages. Faster for visitors, and the site stays up even if WordPress does not.
The one-sentence version: GoDaddy rents you the name and stores your
content; Cloudflare stands in front and does the delivering; Google handles your email and tells you
how people found you.
Who does what — and where to log in
Each of these is a separate company with a separate login. If something breaks, this tells you whose
door to knock on.
GoDaddy Registrar + web hosting
Two jobs in one account. They register the domain name, and they host the WordPress installation
that holds your content. The hosting plan has 30 GB of storage, of which about 2 GB is
in use.
Cloudflare DNS, security, delivery
Answers the "where is this site?" question, shields the site from attacks, speeds it up, and
— increasingly — serves the site itself. Pages hosts finished web pages.
Workers runs small bits of code at the edge. R2 stores files like photos.
WordPress Content management
Where pages and blog posts are written and stored. Runs on the GoDaddy hosting. In a headless
setup this becomes a back-office tool — visitors never touch it directly.
How you know where customers came from
Four Google products, in a chain. Each hands something to the next. It is worth knowing the order,
because when a number looks wrong, the problem is usually one link back from where you noticed it.
- Google Tag Manager — the switchboard
A single piece of code on the site that decides which trackers fire and when. Nothing else
gets installed on the site directly; everything goes through here. Your container is
GTM-MD6Q2S6R.
- Google Analytics 4 — the record keeper
Receives what Tag Manager sends and stores it: visits, pages viewed, and the two things that
matter most —
generate_lead when a form is completed, and
phone_click when someone taps the phone number.
- Google Ads — the spender
Runs the paid adverts. Analytics passes completed leads back to Ads so it can learn which
clicks turned into actual enquiries, and bid accordingly. Without that feedback loop, Ads is
guessing.
- Search Console — the free-traffic mirror
Sits outside the chain. Ads tells you about traffic you paid for; Search Console tells you
about traffic you did not — which searches showed your site, how often people clicked, and
whether Google is having trouble reading any pages.
Google Tag Manager Switchboard
Google Analytics 4 Record keeper
Google Ads Paid advertising
Google Search Console Free search traffic
Your email — where it lives and what guards it
What Google Workspace is
Google Workspace is Gmail and Google Drive, but running on your own domain name. Instead of
something@gmail.com, you get sammy@arborprostree.com. Same familiar Gmail
screen; the difference is the name after the @, which is your business rather than Google's.
Where the mail actually lives
On Google's servers. Cloudflare does not store any of your email — it only holds the
signpost that tells the rest of the world where to deliver it. That signpost is called an
MX record, and yours points at smtp.google.com.
What protects it, and where that protection is configured
Three settings live in Cloudflare's DNS and exist to stop someone forging email that appears to come
from your business — a common way of defrauding customers.
Worth fixing: your domain has no SPF record, while DMARC is already
set to send failures to spam. That combination means your email is leaning on a single check instead
of two. Most of the time it is fine — but a quote that lands in a customer's spam folder looks
to them like you never replied. This is written up as a task and is a small, quick fix.
Aliases — several addresses, one inbox
Extra names can point at the same mailbox, so mail to any of them lands in the same place without
another account to check. Set up so far: Sam, Samuel.Holland,
Sammy.Holland, Melinda, Melinda.Holland, Quote,
Sales, Info, and Help.
Something we have not confirmed. An alias delivers to this mailbox.
That is a different thing from forwarding a copy to an outside address such as a personal
Gmail. We have recorded the aliases above, but we have not verified whether any forwarding rule
actually exists. Rather than state something we have not checked, we have made confirming it part of
the work on lead handling.
Google Workspace Business email
What renews, when, and how often
Only the domain renewal is documented with certainty. The rest is marked honestly as unconfirmed
rather than guessed — a wrong renewal date is worse than a missing one.
Why three rows say "not recorded". The hosting and email renewal details sit
behind the billing area of the accounts, and we have deliberately not stored payment information.
They can be read in a couple of minutes from the GoDaddy billing page and the Workspace admin
console, both linked above. Marked unknown here on purpose — inventing a plausible date is how
a service lapses.
The one to diarise: the domain name. If hosting lapses the site goes
offline and comes back when you pay. If the domain lapses, the name itself can be bought by
somebody else, and getting it back may be impossible at any price. It is the cheapest thing on the
list and the only irreplaceable one.