← Volver al Directorio
Logo: rdyrct

rdyrct

Italy-built URL shortener and QR platform for teams, with custom domains, UTM campaigns, and privacy-respecting click analytics.

Código abiertoAuto-alojadoParcialmente alojado en la UE
URL shortenerbranded linksQR codesUTManalyticsprivacySaaSopen-sourceCloudflare Workers
Visitar sitio webComentarios y correcciones

rdyrct is an Italy-operated URL shortener and QR code platform for teams that want branded links and click analytics without storing IP addresses. Organizations create short links on custom domains, attach UTM campaigns, and generate QR codes, then review clicks by country, referrer, device, and time.

The product runs as a hosted SaaS on Cloudflare Workers, and the same codebase is MIT-licensed for self-hosting on your own Cloudflare account. A free plan covers a small team with API and MCP access; paid plans add custom domains, longer analytics retention, and logo QR codes.

The concrete differentiator is the privacy-bounded click schema: only country, referrer, device, and timestamp are kept for link analytics, with Italian law governing the hosted service and Andrea Bruno named as data controller.

EU-operatedOpen sourceSelf-hostableNo IP in click analyticsAPI + MCP

Shortlist when you need branded short links, QR codes, and organization-scoped APIs with an explicit no-IP click schema under Italian control. Skip when you need a full website analytics suite or a vendor with published ISO/SOC audits and a registered company imprint. Consider Plausible Analytics for sitewide privacy analytics, or keep Google Analytics / Tag Manager when you need broad tagging rather than a redirect layer.

Key capabilities

Point your domain at rdyrct with automatic TLS. Custom domains get chosen slugs; the shared rdyr.cc namespace always assigns random slugs. Hobby allows one custom domain and Pro allows five.

Each click stores country, referrer, device, and timestamp only. The vendor states IP addresses and precise locations are never stored. Retention is plan-tiered (7 / 30 / 365 days on Free / Hobby / Pro).

Built-in UTM builder plus import of existing UTM parameters. Campaigns, sources, and mediums rank by clicks; analytics compare periods, show activity heatmaps, and flag links with no clicks in 30 days or large week-over-week drops.

Generate PNG or SVG QR codes per link with colors and dot shapes. Logo overlays are a paid-plan capability with size limits. A browser-side QR generator page works without an account.

Owner, admin, and member roles with email invites that expire after 7 days. Organization-scoped REST API keys and a hosted MCP server with OAuth or API key auth are available on every plan.

Self-host on Cloudflare Workers, D1, KV, and R2 from the public GitHub repository. Hosted-service terms do not apply to self-hosted installs; you become the platform admin and set your own limits.

De un vistazo

HQ / controller
Andrea Bruno (Italy)
Governing law
Italian law (terms)
License
MIT
Hosted stack
Cloudflare Workers, D1, KV, R2
Commercial model
Free tier + subscription (Polar MoR)
Data residency regions
Cloudflare edge (global PoPs); product analytics via PostHog EU when consented
Cookieless click analytics
Click schema excludes IP; necessary session cookie for accounts; PostHog cookie only with consent

Best fit when

  • Teams that need branded short links and QR codes under one organization with owner/admin/member roles
  • Buyers who require click analytics without storing IP addresses or precise locations
  • Engineers who want REST API keys and a hosted MCP server for agent-driven link workflows
  • Operators willing to run on Cloudflare Workers, including self-host on their own Cloudflare account
  • Italian or EU-governed procurement where the named Italian data controller and Italian governing law matter

Poor fit when

  • Organizations that need a full sitewide web analytics product rather than link and QR redirect analytics
  • Buyers that require a published ISO 27001 or SOC 2 report before shortlisting
  • Teams that refuse US-group subprocessors entirely (hosted path uses Cloudflare, Resend, Polar MoR, and Sentry)
  • Enterprises that need a registered company imprint with public VAT/registry ID on the vendor site

Consider instead when

  • When: You need privacy-friendly website analytics across pages, not just short-link redirects

    Consider: Plausible Analytics or Trackboxx

    Those products measure site traffic; rdyrct measures links and QR scans you create.

  • When: You need a mature MarTech CDP / tag management suite with enterprise contracts

    Consider: Commanders Act

    rdyrct is a focused shortener and QR tool, not a customer data platform.

  • When: You already standardize on Google tagging for campaigns and only need redirect vanity domains later

    Consider: Google Analytics or Google Tag Manager

    Keep them for sitewide tagging; evaluate rdyrct only for the short-link and QR control plane.

Jurisdicción y propiedad

Entidad legal
Andrea Bruno (data controller; no public company registry ID found)
Matriz / control EE.UU.
Sin matriz estadounidense conocida
Exposición CLOUD Act (indicativa)
Medium
Alojamiento / residencia
Dominio / servicioFunciónOperadorEstadoEvidencia
rdyrct.com / rdyr.ccCore app, API, redirectsCloudflare Workers (US-group) · CloudflareFuera de la UEHomepage and GitHub state entire product runs on Cloudflare Workers/D1/KV; privacy sub-processors list Cloudflare for hosting and storage (2026-10-05)
Transactional emailAuth and invitesResend · ResendFuera de la UEPrivacy policy sub-processors (2026-10-05)
Product analytics (optional)PostHog product events with consentPostHog EU · PostHogAlojado en la UEPrivacy policy: PostHog EU for product analytics (2026-10-05)

No known US parent of the product operator. Indicative CLOUD Act exposure is medium because core hosting and several SaaS subprocessors are US-group. Not legal advice.

Sostenibilidad

No encontrado

No public sustainability or renewable-energy datacenter page found on rdyrct.com as of research.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumUS-group hosting and SaaS subprocessors

    Core service runs on Cloudflare; email, billing MoR, and error monitoring also use US-group providers. Teams with a hard ban on US cloud need self-host controls plus their own vendor choices, or a different product.

  • MediumIndividual data controller without public company registry ID

    Procurement teams that require a registered company imprint and VAT ID will need offline confirmation; the public site names Andrea Bruno as controller under Italian law only.

  • MediumNo public independent audit or ISO/SOC

    No-IP click claims are vendor statements. Security questionnaires that mandate third-party audits will stall until materials are provided under NDA or published.

  • LowYoung public product

    Domain and public GitHub repository date from July 2026. Expect faster change and thinner operational history than long-running shorteners.

Open questions for due diligence

  • Will the vendor sign a B2B DPA and provide a current subprocessor list with regions?
  • Is there a registered Italian sole proprietorship or company VAT ID for contracting?
  • Are any independent security or no-logs audits available under NDA?
  • For self-host: which Cloudflare regions or account controls are recommended for residency-sensitive deployments?
Request vendor DPA / enterprise contact
Visitar sitio webCompare similar toolsView alternativesComentarios y correcciones

Preguntas Frecuentes

Product click analytics keep approximate country, referrer host, device type, and timestamp. The privacy policy and homepage both state that IP addresses and precise locations are not stored for those clicks.

Yes. The project is MIT-licensed and documented to run on Cloudflare Workers with D1 and KV. Deploy to your own Cloudflare account; there is no separate enterprise binary held back from the public repo.

Shared-domain links always get random slugs. Chosen slugs and branded hosts require connecting a custom domain on Hobby (1 domain) or Pro (5 domains). Downgraded custom-domain links pause after a grace period rather than deleting immediately.

Create an organization-scoped API key for the REST API, or connect the hosted MCP endpoint at /api/mcp via OAuth (recommended) or the same API key. Tools cover create/update/delete/list links, stats, invites, plan usage, and QR generation.

Andrea Bruno is named as data controller in the privacy policy. Terms of service are governed by Italian law, and EU users are directed to the Italian data protection authority. No public company registry ID was found on the site during research.