Privacy Policy

Last updated: August 10, 2026

1. Introduction

Competitive LLC ("we," "our," or "us") operates ApplicationVirtualization.com ("the Site"). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding data collected through the Site.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

  • Download our Buyer's Guide or other resources (name, email address, company name, job title)
  • Contact us via our contact form (name, email address, message content)
  • Subscribe to our newsletter (email address)
  • Request advisory engagement information (name, email, company, phone, project details)

2.2 Automatically Collected Information

When you visit our Site, certain information is automatically collected by our analytics providers (see Section 4 for the full list). This may include:

  • Truncated / anonymized IP address (Google Analytics 4 strips the last octet before storage; Cloudflare Web Analytics does not store IP addresses at all)
  • Coarse geolocation (country/region level only — granular location & device data collection is disabled in our GA4 property)
  • Browser type, version, and language
  • Device category and operating system (granular device-model data is disabled)
  • Pages visited, time on page, and navigation paths
  • Referring URL and exit pages
  • Aggregate usage statistics

No analytics data is collected from non-consenting visitors. Personalized advertising data is likewise only used after you grant consent (see Section 2.3).

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Site and, with your consent, to analyze traffic. We use:

  • Essential cookies: Required for basic site functionality and security. These are set without consent because the Site cannot operate without them.
  • Analytics cookies (only after consent): Google Analytics 4 (GA4), Cloudflare Web Analytics, and Microsoft Clarity. These are used to understand visitor behavior, traffic sources, and content performance. They are not loaded at all until you click "Accept all" in the cookie banner. Cloudflare Web Analytics is cookie-less and may run before consent, but does not store IP addresses or persistent identifiers.
  • Advertising cookies (personalized ads — only after consent): We display advertising through Google AdSense. Google may use advertising cookies to serve personalized ads only after you click "Accept all" in the cookie banner. If you reject or have not yet made a choice, Google serves non-personalized, contextual ads without setting advertising cookies or building interest profiles. You can manage ad personalization at Google Ads Settings.
  • Defense-in-depth: Our GA4 tag is additionally configured with allow_google_signals: false, allow_ad_personalization_signals: false, and anonymize_ip: true, so the tag itself refuses to send advertising data even if the property-level toggles are ever changed.
  • No User-ID cross-device tracking: GA4 Reporting Identity is set to "Observed" (user ID + device ID only, no modeled cross-device data). We do not assign User IDs to visitors, so cross-device stitching does not occur.

How consent works. On your first visit, a cookie banner asks you to accept or reject non-essential cookies. Your choice is stored in your browser's local storage and remembered on subsequent visits. You can change your choice at any time via the "Cookie Settings" link in the bottom-left corner of the Site. If you reject, no analytics cookies are set, no analytics hits are sent, and no personalized advertising occurs (non-personalized ads may still display). For EU/UK visitors, the lawful basis for processing analytics and advertising data after consent is GDPR Article 6(1)(a) (consent) and the ePrivacy Directive. For visitors who reject, no analytics or advertising personalization data is processed.

3. How We Use Your Information

We use collected information for:

  • Delivering requested resources (Buyer's Guide, whitepapers, comparison matrices)
  • Responding to inquiries and providing advisory engagement information
  • Improving site content, navigation, and user experience based on aggregate analytics
  • Sending occasional updates about new research, guides, or advisory services (only with your explicit consent)
  • Analyzing aggregate traffic patterns to optimize site performance
  • Complying with legal obligations and protecting our rights

4. Third-Party Services and Data Processors

We use the following third-party services that process personal data on our behalf under data processing agreements:

  • Cloudflare, Inc.: CDN, DDoS protection, DNS, and Cloudflare Web Analytics. Data Processing Terms and Standard Contractual Clauses apply. (privacy policy | sub-processors)
  • Google LLC (Google Analytics 4): Website analytics. We have accepted Google's Ads Data Processing Terms. GA4 does not store full IP addresses; it uses IP addresses only briefly for geolocation lookups before discarding them. Google's Standard Contractual Clauses apply for EU/UK transfers. (privacy policy | Data Processing Terms)
  • Google LLC (Google AdSense): Advertising. Serves display and in-content ads on the Site. With your consent, Google may use cookies to personalize ads; without consent, only non-personalized ads are served and no advertising cookies are set. You can control ad personalization at Google Ads Settings. Google's Privacy Policy and ads Data Processing Terms apply. (privacy policy | Data Processing Terms)
  • Microsoft Corporation (Microsoft Clarity): Session replay and heatmaps for UX analysis. Only enabled if you have granted consent. (privacy policy)
  • Resend, Inc.: Transactional email delivery for contact, lead, and demo request notifications sent to our team. No messages are stored beyond Resend's standard retention. (privacy policy)

We do not sell, rent, or trade your personal information to third parties. We do not share personal information with affiliate partners (see Section 5).

5. Affiliate Outbound Links & Third-Party Tracking

ApplicationVirtualization.com participates in affiliate and referral programs (including but not limited to Splashtop, Parallels, Citrix, Microsoft, and Omnissa). When you click on an affiliate link on our Site and make a purchase, we may earn a commission at no additional cost to you. In addition to affiliate referrals, we display advertising through Google AdSense; advertising revenue is separate from and independent of affiliate commissions.

Important: Clicking an affiliate outbound link will direct you to a third-party website. Once you leave our Site, the third party's privacy policy governs how they collect, use, and share your data. We have no control over and assume no responsibility for the content, privacy practices, or data processing of any third-party sites.

Affiliate outbound links may be distinguishable by:

  • URL parameters or redirects that identify our affiliate relationship to the vendor
  • Visual disclosure markings adjacent to the link (e.g., "Affiliate Link" badge or disclosure banner)
  • Tracking pixels or cookies set by the vendor upon click to attribute the referral

We do not share your personal information with affiliate partners. Affiliates receive only the fact that you clicked a link on our Site; they do not receive your name, email, or any other personally identifiable information from us. Any data collected by the affiliate partner after you leave our Site is subject to their privacy policy and terms.

We use first-party cookies solely for site analytics (Cloudflare Web Analytics, Google Analytics GA4). Some affiliate vendors may place third-party cookies on your device when you click their links — you can manage cookie preferences in your browser settings.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including TLS encryption for data in transit, secure form handling via trusted processors, and access controls. However, no internet transmission or storage system is 100% secure.

7. Data Retention

  • Contact form submissions: Retained for 12 months after last correspondence
  • Newsletter subscriptions: Retained until you unsubscribe
  • Resource downloads: Retained for 6 months for delivery confirmation
  • Google Analytics 4 event-level data: Retained for 2 months, then automatically deleted. User-level data: Retained for 14 months (Google's default); the retention clock resets on each new user activity, so a dormant user's data is deleted 14 months after their last visit. Configured in GA4 Admin → Data Settings → Data Retention. Only applies to visitors who granted analytics consent via the cookie banner.
  • Cloudflare Web Analytics: Retained by Cloudflare for up to 30 days, then aggregated. Cookie-less; no persistent identifiers.
  • Microsoft Clarity session recordings: Retained per Microsoft's data retention settings (configurable in the Clarity project; default 90 days). Only active for visitors who granted analytics consent.
  • Cookie consent choice: Stored in your browser's local storage indefinitely (until you clear site data or click "Cookie Settings" and change your choice). Contains no personal data — only an analytics-true/false flag, an ads-true/false flag, and a timestamp.
  • Google AdSense advertising cookies: Set only after you grant consent; expire according to Google's cookie lifetimes (personalization cookies typically up to 13 months from last update, per Google's cookie policy).

You may request deletion of your data at any time by contacting us. For Google Analytics, you may also exercise your right to erasure via the Google Analytics Opt-out Browser Add-on, or by rejecting analytics cookies via our banner.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you (GDPR Art. 15, CCPA §1798.110)
  • Rectification: Request correction of inaccurate data (GDPR Art. 16)
  • Erasure: Request deletion of your data ("right to be forgotten") (GDPR Art. 17, CCPA §1798.105)
  • Portability: Receive your data in a structured, machine-readable format (GDPR Art. 20)
  • Restriction: Request limitation of processing (GDPR Art. 18)
  • Objection: Object to processing based on legitimate interests (GDPR Art. 21)
  • Withdraw consent: Withdraw previously granted consent at any time, without affecting prior lawful processing
  • Opt-out of sale/sharing: California residents may opt out of the sale or sharing of personal information (CCPA/CPRA §1798.120). We do not sell or share personal information; this right is preserved for completeness.
  • Lodge a complaint: File a complaint with your local data protection authority (e.g., the ICO in the UK, CNIL in France, state attorneys general in the US)

To exercise these rights, contact us or email [email protected]. We will respond within 30 days, or earlier where required by local law (e.g., 45 days under CCPA).

9. International Data Transfers

Our Site is hosted in the United States via Cloudflare Pages. When you visit the Site from outside the United States, your information will be transferred to, stored in, and processed in the United States.

For transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States, we and our processors rely on:

  • Standard Contractual Clauses (SCCs): The European Commission's Standard Contractual Clauses (Decision 2021/914) and the UK International Data Transfer Addendum, as executed between us and our processors.
  • EU-U.S. and Swiss-U.S. Data Privacy Framework: Where a processor is certified to the Framework (e.g., Google LLC, Cloudflare Inc.), we rely on that certification.
  • Supplementary safeguards: Including IP anonymization in GA4 and minimization of personal data sent to processors.

By using the Site, you acknowledge that your information may be transferred to and processed in the United States under these safeguards.

10. Children's Privacy

The Site is not directed to children. We do not knowingly collect personal information from anyone under 13 years of age (per the U.S. Children's Online Privacy Protection Act) or under 16 years of age (per the EU General Data Protection Regulation and certain member-state laws). The Site's audience is enterprise IT, architecture, and procurement professionals. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

11. Automated Decision-Making

We do not use your personal data to make automated decisions that produce legal effects or significantly affect you. We do not use your data for automated profiling, credit checks, or similar processing. Aggregate analytics may inform editorial decisions (e.g., which comparison articles to publish) but no individual user is profiled or treated differently as a result.

12. Do Not Sell or Share My Personal Information (CCPA/CPRA)

California residents have the right to opt out of the sale or sharing of their personal information. We do not sell personal information. Google AdSense's serving of personalized ads is a form of "sharing" for cross-context behavioral advertising under the CPRA. You can opt out of this sharing by (1) rejecting non-essential cookies in our cookie banner — this disables personalized ads entirely on our Site — and (2) using Google's controls at Google Ads Settings. We also do not knowingly sell or share the personal information of consumers under 16.

13. Data Breach Notification

In the event of a personal data breach affecting your information, we will notify affected users and the relevant supervisory authorities without undue delay and in accordance with applicable law (e.g., GDPR Art. 33–34 within 72 hours to authorities).

14. Independence & Editorial Disclosure

ApplicationVirtualization.com is operated by Competitive LLC as a Technology Decision Matrix and Advisory Group. We participate in vendor referral programs and may earn commissions from partner links on this site. This does not affect our independent editorial reviews. Our published research and comparisons are methodology-driven and funded by advisory retainers from client engagements, ensuring editorial independence.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

16. Contact Us

For questions about this Privacy Policy or our data practices, contact: