Is your developer holding your site hostage?
Do you know where your site is hosted? Where your domain is hosted? Where your email is hosted? Do you know if you are paying for that hosting directly via your own credit card? Do you have sign-in information for each of these sites and know how to access the information you need? Has your developer ever shared all this with you, and shown you what you need to know?