Privacy

UpworkMRR (www.upworkmrr.com) is operated by MVP Masters OÜ, the company behind Lancer, registered in Estonia (registry code 16911123, Narva mnt 5, 10117 Tallinn). It is an independent project and is not affiliated with Upwork Inc. For anything on this page, email [email protected].

UpworkMRR is a database of Upwork freelancers built from information Upwork shows publicly on their profiles, collected by Lancer's automated systems. We only list freelancers whose profile shows their earnings publicly.

For each freelancer we show the name as Upwork displays it (first name and last initial), headline, bio, city and country, profile photo, skills, badges, Job Success Score, rating, hourly rate, job counts, member-since date and earnings. From the earnings we calculate monthly recurring revenue (six-month earnings divided by six), an earnings history and rankings worldwide, by country and by skill. On the globe each freelancer stands in the city their Upwork profile names, at an arbitrary spot inside it that we store with their record; when we cannot place that city, a country's top three stand in its largest city instead and everyone else is left off the map. We never have, or show, a street address.

Anyone can look up a public Upwork profile by pasting its URL. If that profile is not in the database yet, looking it up adds it.

Email [email protected] with the link to your Upwork profile. We then remove everything that identifies you: name, photo, headline, bio, city, hourly rate, job history, badges and your Upwork link. Your old profile page stops working, and you no longer appear in name search, city pages or the globe. Your earnings, MRR, growth, country, skills and rankings stay on the leaderboards as an anonymous "Hidden freelancer" row, on a page search engines are told not to index. If you want your record removed entirely, say so in the same email.

The newsletter, weekly report, Lancer discount, profile roast and playbook forms ask for your email and your Upwork profile URL, and optionally your LinkedIn URL. The weekly report form also has an optional box for a short note to us, in your own words. We also record which page you came from. The report form looks your Upwork profile up as soon as you paste it, so it can show you your own numbers before you send the form; if the profile is not in the database yet, that adds it.

We store your request in Lancer's database on Google Cloud, together with a snapshot of your public Upwork data from our database (name, title, country, earnings, MRR, hourly rate, Job Success Score and badges). If your profile was not in the database yet, submitting it adds it — and publishes it on UpworkMRR. We add you to Lancer's email list (held at Resend, and shared with lancer.app), send you a confirmation email, and post your submission, note included, to our team's Discord channel. We do not store your IP address with your form submission.

The "Can't find yourself?" box takes only an Upwork profile URL. We use it to look that profile up and, if it is missing, to add it. We do not ask for your email there.

• DataFast measures visits (pages viewed, referrers, device and country). Visits from automated crawlers are also reported to DataFast from our server, with the crawler's IP address and user agent.
• PostHog records how visitors use pages (page views, clicks, scrolling and a replay of the visit with everything typed into forms masked), to help us improve them. When you sign up for the weekly report, your email address is attached to your visit so we can see what led to it. PostHog processes this data in the United States.
• The globe shows a live feed of what visitors are opening, including when someone leaves for a freelancer's Upwork profile. It comes from DataFast, and from the globe itself: when you open a country, a city or a freelancer's pin there, the site records that action with your DataFast visitor ID, your country and the minute, in Upstash Redis for two hours, and shows it the same way. Each visitor appears under a made-up nickname that changes every day and cannot be worked out from their visitor ID, with their country, the page or place they opened, the time to the minute, and a dot placed within roughly 10 km of where their IP address appears to be. Your IP address and visitor ID never reach the page.
• The globe's map is drawn by Mapbox: its map data and fonts load directly from Mapbox, which therefore sees your IP address and receives anonymous usage events from the map.
• Cloudflare Turnstile checks that you are human before the site loads freelancer data. Cloudflare receives your IP address and browser signals to do this.
• To stop abuse we count requests per IP address. The count lives for a few minutes, or one hour if you exceed the limit, in Upstash Redis.
• Freelancer photos load directly from Upwork, which therefore sees your IP address.
• Our hosting and network providers, Google Cloud and Cloudflare, keep standard request logs that include your IP address, under their own retention settings.

The site sets one cookie of its own for every visitor: umrr_clearance, which proves you passed the bot check. It lasts one hour and contains no identifier.

The analytics tools we embed set their own cookies on this site for every visitor. DataFast sets datafast_visitor_id, a pseudonymous visitor ID kept for a year, and datafast_session_id for the current visit. PostHog sets a ph_ cookie with a pseudonymous visitor ID, kept for a year. Cloudflare may set a cookie for its bot check.

Your browser also remembers whether you dismissed or answered our prompts and which map look you picked on the globe (local storage), and where you scrolled to in the leaderboard (session storage).

• Publishing freelancer profiles: our legitimate interest, and the public's, in showing what freelancers earn on Upwork, using information they chose to make public. You can object at any time — see "Hiding your profile".
• Security (the bot check, rate limiting, request logs): our legitimate interest in keeping the site and its data safe from abuse.
• Analytics (DataFast, PostHog): our legitimate interest in understanding how the site is used, so we can improve it.
• Forms and our email list: your consent, given when you submit a form. You can withdraw it at any time by asking us to remove you.

• Cloudflare — network delivery and bot protection
• Google Cloud and Firebase — hosting, and the database behind form submissions
• Hetzner — servers that run Lancer's collection of public profile data
• Lancer's search database (Elasticsearch) — the freelancer data itself
• Resend — email delivery and our email list
• Discord — our team's chat, where new form submissions are posted
• Upstash — rate limiting
• DataFast and PostHog — analytics
• Mapbox — the map on the globe

Several of these providers are based in, or process data in, the United States and other countries outside the EU.

Rate-limit counts expire within minutes (an hour after a limit is exceeded) and the bot check cookie after an hour. There is no automatic deletion schedule for freelancer records, form submissions or the email list: they are kept until you ask us to delete them.

You can ask us for a copy of the data we hold about you, to correct it, to delete it, or to stop using it — including objecting to your profile being published here. Email [email protected]; to stop receiving our emails, reply to one or email the same address. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or your local data protection authority.

Lancer's own product is covered by the lancer.app privacy policy.