privacy policy
Privacy Policy
This policy explains what personal data this portfolio receives while you browse it, why, who helps process it and what rights you have. It describes how this edition of the website actually works today.
Effective from 31 October 2026 · Last updated 31 October 2026
01
Introduction
This is the Upwork edition of the portfolio of Jack Milka (Yevhenii Milka), a UI/UX and digital product designer, at https://mlkdesign.github.io/upwork/. It shows case studies and a CV for clients who found Jack on Upwork.
The website has no contact form and no accounts. You cannot buy services, pay or sign contracts on it; all communication and work happen on Upwork.
02
Data Controller
- Controller
- Yevhenii Milka, Individual Entrepreneur (ФОП Мілка Євгеній Володимирович)
- Country of registration
- Ukraine
- Privacy questions
- Through Upwork messages, on the Upwork job or contract where you received the link to this portfolio
03
Information We Collect
Technical data
When you open the website, our hosting provider (GitHub Pages) and the services that deliver the site’s JavaScript libraries (unpkg.com, esm.sh) receive your IP address and browser information, as any web server does. Opening the CV works the same way.
Visit statistics (Google Analytics)
Only after you click “accept” in the cookie banner, Google Analytics 4 records which pages you view, the device, browser and approximate location it derives from your connection, and clicks on a fixed set of elements: opening a case study, opening a project’s live site and opening the CV.
Visit statistics (Microsoft Clarity)
Microsoft Clarity records how visitors use the pages: clicks, scrolling and mouse movement, which it turns into heatmaps and session recordings, together with the pages viewed, the device, the browser and the approximate location it derives from your connection. Clarity does not wait for the cookie banner.
We do not use advertising pixels or build advertising profiles.
Messages on Upwork
What you send through Upwork is processed by Upwork under its own privacy policy. This website does not receive it.
04
How We Use Information
- To understand which work and pages interest visitors (Google Analytics, only with your consent).
- To see how visitors use the site and fix what gets in their way (Microsoft Clarity).
- To keep the website secure and working.
We do not use this data for marketing, and we do not sell or rent personal data.
05
Legal Basis
We process personal data under the Law of Ukraine “On Personal Data Protection” and, where it applies to you, the EU General Data Protection Regulation (GDPR).
| Purpose | Basis |
|---|---|
| Hosting and security of the website | Legitimate interest in a safe, working website — GDPR Art. 6(1)(f) |
| Visit statistics (Google Analytics) | Your consent, given in the cookie banner — GDPR Art. 6(1)(a); Art. 11 of the Ukrainian law. You can withdraw it at any time. |
| Visit statistics (Microsoft Clarity) | Legitimate interest in understanding how the website is used and improving it — GDPR Art. 6(1)(f). You can object at any time or block the Clarity cookies in your browser. |
06
Third-Party Services
| Service | What it does | Data it receives |
|---|---|---|
| GitHub Pages (GitHub, Inc., USA) | Hosts the website | IP address and browser data of every visitor; GitHub keeps visitor IP addresses in logs for security purposes |
| unpkg.com, esm.sh | Deliver the open-source JavaScript libraries the site uses for animation and scrolling | IP address and browser data when the page loads |
| Google Analytics 4 (Google) | Visit statistics, after you accept | A random visitor ID stored in cookies, pages viewed, device and browser data, approximate location, the fixed interaction events described above. Google signals and ad personalisation are switched off. |
| Microsoft Clarity (Microsoft Corporation, USA) | Heatmaps and session recordings | Clicks, scrolling and mouse movement, pages viewed, device and browser data, approximate location derived from the IP address, a random visitor ID stored in cookies |
Fonts are served from this website itself. There are no embedded videos, social widgets or CAPTCHA. Links to project sites, company pages and Behance only take you there when you click them.
07
Data Retention
- Hosting and delivery logs — kept by the providers listed above under their own retention rules.
- Google Analytics — keeps event data for the retention period set in our account (2 months, the GA4 default), then deletes it.
- Microsoft Clarity — keeps recordings and statistics for the retention periods Microsoft sets for the service, then deletes them.
08
International Data Transfers
The controller is based in Ukraine. GitHub, Google and Microsoft process data in the United States and other countries. These providers state that they protect international transfers with the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Ukraine does not currently have an EU adequacy decision.
09
Your Rights
Depending on the law that applies to you, you can ask us to:
- tell you whether we process your data and give you a copy (access);
- correct inaccurate or incomplete data;
- delete your data where there is no reason to keep it;
- restrict processing while a question about it is being resolved;
- stop processing based on our legitimate interest (objection);
- withdraw consent at any time, where processing is based on consent.
Send your request through Upwork messages. We reply within one month and may ask you to confirm that the request comes from you. You can withdraw your analytics consent yourself at any time with the “cookie settings” link at the bottom of every page.
You can also complain to a supervisory authority: in the EU/EEA, to the data protection authority of the country where you live or work; in Ukraine, to the Ukrainian Parliament Commissioner for Human Rights. You can also go to court.
10
Security
The website is served only over HTTPS and does not ask you for any personal information. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security.
11
Cookies & Analytics
Google Analytics is off by default: until you click “accept”, the analytics script is not loaded and nothing is sent to Google. “decline” keeps it off and the site works the same. You can change or withdraw your choice at any time with the “cookie settings” link at the bottom of the page; withdrawing deletes the analytics cookies.
Microsoft Clarity runs without waiting for the banner and can set the cookies below; Microsoft may also set its own cookies on its clarity.ms domain. You can block or delete them in your browser settings, and the site works the same without them.
| Name | Purpose | Kept for |
|---|---|---|
| _ga | Google Analytics: tells visits from different browsers apart (set only after you accept) | Up to 2 years |
| _ga_4RJRW3679Y | Google Analytics: keeps the state of the current visit (set only after you accept) | Up to 2 years |
| _clck | Microsoft Clarity: keeps the same random visitor ID across visits | Up to 1 year |
| _clsk | Microsoft Clarity: joins the pages you view into one session | 1 day |
Local storage
| Name | Purpose | Kept for |
|---|---|---|
| jack-milka-cookie-preference | Remembers your analytics choice | Until you change it or clear your browser data |
12
Questions & Updates
For any question about your data, send a message through Upwork.
We update this policy when the way the website works changes. The date at the top shows the latest version.
Effective from 31 October 2026. Last updated 31 October 2026.