Privacy

UpworkMRR (www.upworkmrr.com) is operated by MVP Masters OÜ, the company behind Lancer, registered in Estonia (registry code 16911123, Narva mnt 5, 10117 Tallinn). It is an independent project and is not affiliated with Upwork Inc. For anything on this page, email [email protected].

UpworkMRR is a database of Upwork freelancers built from information Upwork shows publicly on their profiles, collected by Lancer's automated systems. We only list freelancers whose profile shows their earnings publicly.

For each freelancer we show the name as Upwork displays it (first name and last initial), headline, bio, city and country, profile photo, skills, badges, Job Success Score, rating, hourly rate, job counts, member-since date and earnings. From the earnings we calculate monthly recurring revenue (six-month earnings divided by six), an earnings history and rankings worldwide, by country and by skill.

Anyone can look up a public Upwork profile by pasting its URL. If that profile is not in the database yet, looking it up adds it.

Email [email protected] with the link to your Upwork profile. We then hide your earnings, MRR, rankings and earnings history, take you out of the leaderboards and search results, and mark your page so search engines do not index it. The rest of your public Upwork profile stays on your page: name, photo, headline, bio, location, skills, badge, Job Success Score, rating and review count, hourly rate, member-since date, intro video and job counts. If you want your record removed entirely, say so in the same email.

The newsletter, Lancer discount, profile roast and playbook forms ask for your email and your Upwork profile URL, and optionally your LinkedIn URL. We also record which page you came from.

We store your request in Lancer's database on Google Cloud, together with a snapshot of your public Upwork data from our database (name, title, country, earnings, MRR, hourly rate, Job Success Score and badges). If your profile was not in the database yet, submitting it adds it — and publishes it on UpworkMRR. We add you to Lancer's email list (held at Resend, and shared with lancer.app), send you a confirmation email, and notify our team by email. We do not store your IP address with your form submission.

The "Can't find yourself?" box takes only an Upwork profile URL. We use it to look that profile up and, if it is missing, to add it. We do not ask for your email there.

• DataFast measures visits (pages viewed, referrers, device and country). Visits from automated crawlers are also reported to DataFast from our server, with the crawler's IP address and user agent.
• Hotjar records how visitors use pages, to help us improve them.
• Cloudflare Turnstile checks that you are human before the site loads freelancer data. Cloudflare receives your IP address and browser signals to do this.
• To stop abuse we count requests per IP address. The count lives for a few minutes, or one hour if you exceed the limit, in Upstash Redis.
• Freelancer photos load directly from Upwork, which therefore sees your IP address.
• Our hosting and network providers, Google Cloud and Cloudflare, keep standard request logs that include your IP address, under their own retention settings.

The site sets one cookie of its own for every visitor: umrr_clearance, which proves you passed the bot check. It lasts one hour and contains no identifier. Staff who sign in to the admin area also get an admin_session cookie.

The analytics tools we embed set their own cookies on this site for every visitor. DataFast sets datafast_visitor_id, a pseudonymous visitor ID kept for a year, and datafast_session_id for the current visit. Hotjar sets _hjSessionUser_6645564, a pseudonymous visitor ID kept for a year, and _hjSession_6645564 for the current visit. Cloudflare may set a cookie for its bot check.

Your browser also remembers whether you dismissed or answered our prompts (local storage) and where you scrolled to in the leaderboard (session storage).

• Publishing freelancer profiles: our legitimate interest, and the public's, in showing what freelancers earn on Upwork, using information they chose to make public. You can object at any time — see "Hiding your earnings".
• Security (the bot check, rate limiting, request logs): our legitimate interest in keeping the site and its data safe from abuse.
• Analytics (DataFast, Hotjar): our legitimate interest in understanding how the site is used, so we can improve it.
• Forms and our email list: your consent, given when you submit a form. You can withdraw it at any time by asking us to remove you.

• Cloudflare — network delivery and bot protection
• Google Cloud and Firebase — hosting, and the database behind form submissions
• Hetzner — servers that run Lancer's collection of public profile data
• Lancer's search database (Elasticsearch) — the freelancer data itself
• Resend — email delivery and our email list
• Upstash — rate limiting
• DataFast and Hotjar — analytics
• Supabase — an older database that still holds earlier form submissions

Several of these providers are based in, or process data in, the United States and other countries outside the EU.

Rate-limit counts expire within minutes (an hour after a limit is exceeded) and the bot check cookie after an hour. There is no automatic deletion schedule for freelancer records, form submissions or the email list: they are kept until you ask us to delete them.

You can ask us for a copy of the data we hold about you, to correct it, to delete it, or to stop using it — including objecting to your profile being published here. Email [email protected]; to stop receiving our emails, reply to one or email the same address. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or your local data protection authority.

Lancer's own product is covered by the lancer.app privacy policy.