Polish vs rdyrct

Confronta Polish e rdyrct su capacità, giurisdizione, garanzie e idoneità per acquirenti europei.

Entrambi elencati come alternative a: Google Tag Manager

Logo: Polish

Polish

France· Marketing Technology (MarTech) / Tag Management / Customer Data Platform

Needs review

Shortlist when you want a French-operated AI agent to rewrite and test headlines/CTAs on live traffic with minimal install. Skip when you need published subprocessors, a signed DPA on day one, self-hosting, or enterprise experiment governance. Consider VWO for mature A/B suites, or Mouseflow / Commanders Act when analytics or MarTech depth matters more than autonomous copy.

EU-operatedAI CRO agentFirst-party pixelSaaSEarly access
Logo: rdyrct

rdyrct

Italy· Marketing Technology (MarTech) / Tag Management / Customer Data Platform

Needs review

Shortlist when you need branded short links, QR codes, and organization-scoped APIs with an explicit no-IP click schema under Italian control. Skip when you need a full website analytics suite or a vendor with published ISO/SOC audits and a registered company imprint. Consider Plausible Analytics for sitewide privacy analytics, or keep Google Analytics / Tag Manager when you need broad tagging rather than a redirect layer.

EU-operatedOpen sourceSelf-hostableNo IP in click analyticsAPI + MCP
Polish vs rdyrct: Sintesi
CaratteristicaLogo: PolishPolishLogo: rdyrctrdyrct
Paese di origineFranceItaly
CategoriaMarketing Technology (MarTech) / Tag Management / Customer Data PlatformMarketing Technology (MarTech) / Tag Management / Customer Data Platform
Open sourceNoSì
Self-hostedNoSì
SedeFranceItaly
Soggetto giuridicoDOGFOODED SAS (SIREN 107391229), 117 rue de Vaugirard, 75015 ParisAndrea Bruno (data controller; no public company registry ID found)
Capogruppo / controllo USANessuna capogruppo USA notaNessuna capogruppo USA nota
Esposizione CLOUD Act (indicativa)MedioMedio
Stato di hosting UEParzialeParziale
Hosting / residenzaMarketing site and app responses served via Vercel (US-group cloud). No public subprocessor schedule for databases, AI inference, email, or backups. Account auth uses Google sign-in per privacy policy.Primary app and redirects on Cloudflare Workers/D1/KV/R2. Privacy policy also lists Resend (email), Polar (billing MoR), PostHog EU (optional product analytics), and Sentry (errors).
Riassunto

French AI CRO agent that rewrites headlines and CTAs from first-party visit signals, tests them on live traffic, and keeps what converts.

Italy-built URL shortener and QR platform for teams, with custom domains, UTM campaigns, and privacy-respecting click analytics.

Tag
A colpo d'occhio: Polish vs rdyrct
A colpo d'occhioLogo: PolishPolishLogo: rdyrctrdyrct
HQParis, FranceNon indicato
Legal entityDOGFOODED SAS (SIREN 107391229)Non indicato
Product typeSaaS AI CRO / personalization agentNon indicato
InstallSingle head snippetNon indicato
Commercial modelMonthly subscription with short free trialFree tier + subscription (Polar MoR)
Open sourceNoNon indicato
Self-hostNo (not documented)Non indicato
HQ / controllerNon indicatoAndrea Bruno (Italy)
Governing lawNon indicatoItalian law (terms)
LicenseNon indicatoMIT
Hosted stackNon indicatoCloudflare Workers, D1, KV, R2
Data residency regionsNon indicatoCloudflare edge (global PoPs); product analytics via PostHog EU when consented
Cookieless click analyticsNon indicatoClick schema excludes IP; necessary session cookie for accounts; PostHog cookie only with consent
Key capabilities: Polish vs rdyrct
Key capabilitiesLogo: PolishPolishLogo: rdyrctrdyrct
EU-operatedSìSì
AI CRO agentSìNon indicato
First-party pixelSìNon indicato
SaaSSìNon indicato
Early accessSìNon indicato
Open sourceNon indicatoSì
Self-hostableNon indicatoSì
No IP in click analyticsNon indicatoSì
API + MCPNon indicatoSì

Polish

  • Visit-aware headline and CTA rewriting

    Uses first-party visit context (source, campaign, device, new vs returning) to draft headlines and CTAs in the site language and configured brand voice, without changing logo, colors, or layout.

  • Live-traffic keep-what-converts loop

    Serves variants on real visitors, allocates more traffic to what converts, and rewrites underperformers. Early access focuses on headlines/CTAs; fuller per-visitor page layouts are described as early-member rollout.

  • Plain-language decision feed with human control

    Every audience, page, and result lands in a readable feed. Operators set voice instructions, approve or auto-publish pages, steer tone, or pause anything.

  • One-line install across common stacks

    A single script tag in the page head covers Next.js, Webflow, WordPress, Shopify, or plain HTML. Returning visitors are described as served from cache so the pixel stays async and light.

  • First-party conversion pixel

    Measurement is Polish's own first-party pixel, independent of your analytics stack. Marketing claims no cookies; the privacy policy still describes an anonymous identifier stored in the browser, so treat cookie claims as needing legal review.

rdyrct

  • Branded short links on custom domains

    Point your domain at rdyrct with automatic TLS. Custom domains get chosen slugs; the shared rdyr.cc namespace always assigns random slugs. Hobby allows one custom domain and Pro allows five.

  • Privacy-bounded click analytics

    Each click stores country, referrer, device, and timestamp only. The vendor states IP addresses and precise locations are never stored. Retention is plan-tiered (7 / 30 / 365 days on Free / Hobby / Pro).

  • UTM campaigns and quiet-link alerts

    Built-in UTM builder plus import of existing UTM parameters. Campaigns, sources, and mediums rank by clicks; analytics compare periods, show activity heatmaps, and flag links with no clicks in 30 days or large week-over-week drops.

  • QR codes with optional logo

    Generate PNG or SVG QR codes per link with colors and dot shapes. Logo overlays are a paid-plan capability with size limits. A browser-side QR generator page works without an account.

  • Organizations, API, and MCP

    Owner, admin, and member roles with email invites that expire after 7 days. Organization-scoped REST API keys and a hosted MCP server with OAuth or API key auth are available on every plan.

  • MIT open source on Cloudflare

    Self-host on Cloudflare Workers, D1, KV, and R2 from the public GitHub repository. Hosted-service terms do not apply to self-hosted installs; you become the platform admin and set your own limits.

Assurance & compliance: Polish vs rdyrct
Assurance & complianceLogo: PolishPolishLogo: rdyrctrdyrct
Independent security / no-logs audit
Not found

No public security or audit page located.

Not found

Vendor claims no IP storage for clicks; no independent audit PDF found on the public site.

ISO 27001
Not found

No ISO claim found on getpolish.app.

Not found
SOC 2 / SOC 3
Not found

No SOC 2/3 claim found.

Not found
GDPR / EU data protection
Vendor claimed

EU (French) controller entity and a public privacy policy exist; confirm lawful basis, DPA, and cookie/identifier treatment for your sites.

Vendor claimed

Italian data controller; privacy policy describes lawful bases, rights, and Italian DPA complaint path. Confirm DPA for B2B.

US CLOUD Act exposure (indicative)
Partial

EU entity / no known US parent, but public site runs on Vercel and account auth uses Google. Backend subprocessors unpublished. Not legal advice.

Partial

Italian operator / no known US parent, but hosted path uses Cloudflare, Resend, Polar MoR, and Sentry (US-group SaaS/cloud). Not legal advice.

Data processing agreement (B2B)
Not found

No public DPA download or in-product DPA link found; email hello@dogfooded.com.

Not found

No public DPA download or in-product DPA link found during research.

EU AI Act
Unknown

Product is AI-centric (autonomous copy generation) but no AI Act classification or documentation was published on the site.

Not applicable
Considerations & known limitations: Polish vs rdyrct
Considerations & known limitationsLogo: PolishPolishLogo: rdyrctrdyrct
No public subprocessor or region list
Medium

Hosting beyond Vercel edge headers and Google sign-in is unpublished. Procurement should request a subprocessor schedule and regions before production on personal data-heavy sites.

Non indicato
Cookieless marketing vs stored browser identifier
Medium

Marketing promises no cookies while the privacy policy describes an anonymous identifier stored in the browser. Legal review is needed for consent banners and ePrivacy.

Non indicato
Early-access feature scope
Low

Fuller per-visitor page layouts are still rolling out; today's verified core is headline/CTA rewriting and testing.

Non indicato
US-group cloud and auth dependencies
Medium

Vercel-served app and Google sign-in create US CLOUD Act-relevant paths even though the legal entity is French.

Non indicato
US-group hosting and SaaS subprocessorsNon indicato
Medium

Core service runs on Cloudflare; email, billing MoR, and error monitoring also use US-group providers. Teams with a hard ban on US cloud need self-host controls plus their own vendor choices, or a different product.

Individual data controller without public company registry IDNon indicato
Medium

Procurement teams that require a registered company imprint and VAT ID will need offline confirmation; the public site names Andrea Bruno as controller under Italian law only.

No public independent audit or ISO/SOCNon indicato
Medium

No-IP click claims are vendor statements. Security questionnaires that mandate third-party audits will stall until materials are provided under NDA or published.

Young public productNon indicato
Low

Domain and public GitHub repository date from July 2026. Expect faster change and thinner operational history than long-running shorteners.

Idoneità

Polish

Best fit when

  • Founders or lean growth teams without a dedicated CRO function
  • Sites that can paste one head snippet (Next.js, Webflow, WordPress, Shopify, HTML)
  • Teams that want AI-written headline/CTA variants tested on real traffic
  • Buyers who need a French SAS contracting entity for MarTech shortlists
  • Operators who want pause/approve controls and a plain-language change feed

Poor fit when

  • Orgs that require a public subprocessor list, SOC 2/ISO pack, or in-product DPA before pilot
  • Teams that need self-hosting or Google-free authentication
  • Enterprises needing mature multivariate governance comparable to VWO-class platforms
  • Buyers seeking a full analytics, CDP, or tag-management suite rather than CRO copy automation

Consider instead when

  • When: You need a mature experiment / A/B platform with deeper governance

    Consider: VWO

    US incumbent; stronger classic experiment tooling, weaker AI-autonomous copy story than Polish.

  • When: You primarily need European web analytics or session insight, not autonomous copy CRO

    Consider: Mouseflow or Piwik PRO

    Analytics depth first; they do not replace Polish's rewrite-and-test agent.

  • When: You need French/EU MarTech, tag management, or CDP breadth

    Consider: Commanders Act

    Broader MarTech stack; not an AI headline agent.

rdyrct

Best fit when

  • Teams that need branded short links and QR codes under one organization with owner/admin/member roles
  • Buyers who require click analytics without storing IP addresses or precise locations
  • Engineers who want REST API keys and a hosted MCP server for agent-driven link workflows
  • Operators willing to run on Cloudflare Workers, including self-host on their own Cloudflare account
  • Italian or EU-governed procurement where the named Italian data controller and Italian governing law matter

Poor fit when

  • Organizations that need a full sitewide web analytics product rather than link and QR redirect analytics
  • Buyers that require a published ISO 27001 or SOC 2 report before shortlisting
  • Teams that refuse US-group subprocessors entirely (hosted path uses Cloudflare, Resend, Polar MoR, and Sentry)
  • Enterprises that need a registered company imprint with public VAT/registry ID on the vendor site

Consider instead when

  • When: You need privacy-friendly website analytics across pages, not just short-link redirects

    Consider: Plausible Analytics or Trackboxx

    Those products measure site traffic; rdyrct measures links and QR scans you create.

  • When: You need a mature MarTech CDP / tag management suite with enterprise contracts

    Consider: Commanders Act

    rdyrct is a focused shortener and QR tool, not a customer data platform.

  • When: You already standardize on Google tagging for campaigns and only need redirect vanity domains later

    Consider: Google Analytics or Google Tag Manager

    Keep them for sitewide tagging; evaluate rdyrct only for the short-link and QR control plane.

Open questions for due diligence

Polish

  • Will DOGFOODED SAS sign a B2B DPA and publish subprocessors (hosting, AI model provider, email, backups) with regions?
  • Where is optimization/visitor data stored at rest, and is an EU-only processing path available?
  • How is the anonymous browser identifier implemented if marketing claims no cookies (localStorage, cookie, other)?
  • Is non-Google authentication planned for workspace accounts?
  • What AI model providers process page copy, and is customer content retained for training?

rdyrct

  • Will the vendor sign a B2B DPA and provide a current subprocessor list with regions?
  • Is there a registered Italian sole proprietorship or company VAT ID for contracting?
  • Are any independent security or no-logs audits available under NDA?
  • For self-host: which Cloudflare regions or account controls are recommended for residency-sensitive deployments?