Can Someone Tell If You Opened Their PDF?

If you are reading this from the other side — you send documents and want to know what a reader is told — create a free tracked link and open it yourself, or look at the live demo, which shows the whole record on sample data with no signup.

It depends on how the document reached you

Find the row that matches how you got the file. The third column is what the sender can see about you, not what the technology could theoretically do.

Two of those rows are the ones people are actually asking about, and they point in opposite directions. An ordinary PDF attachment is genuinely private: nothing is recorded, nobody is told, and no tracked-link tool we have found changes that — which is why the honest version of this whole topic starts by conceding it, at whether PDFs have read receipts. The exception is not a tracker at all: a document-rights product wraps the file in its own controlled reader, which reports back on a copy the reader already has, at the cost of making them install it — the trade described further down this page. A hosted link is genuinely instrumented, and pretending otherwise would be the same dishonesty in the other direction.

Exactly what a sender learns, and what they do not

Six things, in our product, and it is a short list on purpose. The sender is shown the document, the moment it was opened, which pages rendered, how long each one held attention, an approximate country, and whether the device was a phone, a tablet or a desktop. That is the record.

What is not in it matters more to you. There is no city — the location lookup reads a country-level database and never returns one. There is no name and no email address unless the link asked for one and you typed it; when it does ask, the viewer says so on the page, in the words “Your email is shared with the document's sender.” An address you simply type is not verified, and on that kind of link it proves only that somebody typed it — but be aware that a Pro link can require a one-time code sent to that address before the document opens, and the sender is then shown, per visit, that the address was confirmed. There is no camera, no keystrokes, no other tabs, no access to anything on your machine: a hosted viewer sees the pages it rendered for you and nothing outside its own window. And there is no reading of your mind — a page that stayed on screen for four minutes may have been a page you left open while you made coffee, and nothing in PDFTrackr's record distinguishes the two.

The notice you are shown is thinner than the record. On a PDFTrackr link the consent bar reads “We use cookies to measure site usage.” beside links to the privacy and cookie policies — a statement about site measurement, not a statement that the sender will be shown which pages you read. We think the sender should tell you, and we have written the argument for it at whether you should tell people you are tracking a document. Under Article 13 of the GDPR, a data controller collecting personal data from the person it concerns has to say at collection time what it is being collected for; whether a particular share falls under that is a question for the sender and their lawyer, not one a tool can answer for them.

After you download it, and after you print it

Downloading ends the record. A downloaded copy is an ordinary file on your device, with no connection back to the sender: opening it a week later, emailing it to a colleague, annotating it, printing it, none of that reaches anyone. The one thing a sender can see is the moment you pressed the download control inside the viewer, because that click happened on their page — and some senders switch the control off entirely, which is a setting on the link rather than anything in the file.

Printing is the case people most often assume is covered, and it is not. A PDF opened in your own reader and sent to your own printer produces no signal anywhere; nothing in the file phones home. Document-rights products in the enforcement category do log printing, because they require their own controlled reader before the document will open at all — that is a genuine capability PDFTrackr does not have and does not claim, and the trade is that a reader has to install something. A tracked link asks nothing of you and, correspondingly, stops at the edge of its own viewer.

A tracked link versus an email tracking pixel

These get confused constantly, and they measure different events. An email tracking pixel is a one-pixel image in the body of a message; it reports that the message was displayed with images loaded, and many mail clients block remote images by default, which is why pixel-based “open rates” are unreliable in both directions. A tracked link reports nothing until you click it, and then reports the reading rather than the delivery.

For a recipient the practical difference is consent-shaped: the pixel fires without any action from you, while the link is something you chose to open. That is also the distinction professional bodies have drawn. The Illinois State Bar Association's 2018 advisory opinion on tracking software holds that a lawyer may not use it in communications with clients or other lawyers without informed consent, and explicitly does not extend that to the visible kind — an Outlook read receipt the recipient is shown and can decline. The line is not the measurement; it is whether you had any way of knowing.

It is also the reason the counts on either side are worth less than they look. A number that includes every automated fetch is an upper bound rather than a headcount, which is the whole argument at whether PDF view counts are real. PDFTrackr classifies automated visitors at the end of each session and excludes them, and the decision is on record per session rather than applied invisibly — a description of what the filter does, not a claim that every machine is caught.

What you can do about it

Four options, in ascending order of how much you give up.

• Ask. The unglamorous one that works. “Is that link tracked?” is a normal question, and a sender who will not answer it has told you something.
• Download and read the copy. The record stops at the download. Everything after it happens in your own reader, invisibly.
• Do not type an email address into a gate you did not expect. Without one the session is a device and an approximate country, which is far short of a name.
• Accept that the timestamp is coming. Opening a hosted link at all produces a record. If that is unacceptable for a particular document, the only reliable answer is to ask the sender for an attachment.

None of that is an argument against document tracking, and it would be strange coming from us if it were. The argument we would make is narrower: a reader is entitled to know what the record contains, senders generally overestimate what it tells them, and a tool that publishes both is easier to trust than one that lets people imagine either. Everything described on this page is what our own free plan records, written down so a reader can check it rather than guess.

Keep reading: whether PDFs have read receipts, whether you should tell people you are tracking a document, whether PDF view counts are real, and how free PDF tracking works.