Download, Print, Copy. And Capture Protection
What viewers can take out of the reading room. Plus watermarks at three intensities and the four-layer capture shield.
Getting someone into the reading room is half the story. These controls decide what they can take out of it.
Download
Allow or block the file download per link.
- Allowed. A download button appears in the reading room.
- Blocked. Viewers can read every page but cannot save the file.
Allow or block printing.
- When printing is blocked, the browser print path is disabled inside the reading room.
Copy and text selection
Allow or block text selection and copy.
- When copying is blocked, text in the rendered pages cannot be selected or copied to the clipboard.
Controls, not physics
Download, print, and copy controls stop the document from leaving through normal channels. A determined viewer can still photograph a screen. Which is exactly why the watermark and capture shield exist below.
Watermarks
Stamp the document pages with the viewer's identity so any leak names its source.
Three modes per link:
| Mode | Behavior |
|---|---|
| Off | No watermark. |
| Overlay | A per-viewer identity mark drawn on top of every page in the reading room. Low friction, still traceable. |
| Burned in | The per-viewer identity is stamped into every delivered page server-side. It survives downloads. |
Three intensities, chosen per link:
| Intensity | Opacity | Use |
|---|---|---|
| Light | 14% | A quiet mark for documents that must stay pristine. |
| Standard | 24% | The default. Readable document, clear trace. |
| Strong | 38% | Maximum deterrence for highly sensitive pages. |
Density controls how many stamps tile each page. 1 to 60, with quick steps of 4, 10, 20, 30, or 50. Four stamps deters a casual photo; thirty makes a page genuinely tedious to crop clean. The default is 4.
Watermarks can also cover every document inside a data room and every page a signer views during signing.
Screenshot protection
Turn on screenshot protection to make capture slow, partial, and traceable. It is a four-layer shield; the recommended set is on by default, and each layer can be tuned per link:
| Layer | What it does | Default |
|---|---|---|
| Blur on leave | The whole room frosts when the pointer leaves the window, the window loses focus (another app or snipping tool), or the tab is hidden. | On |
| Block capture keys | The room frosts the instant a capture shortcut starts, Print Screen, the Windows key, ⌘⇧ on macOS, and a Print Screen grab is wiped from the clipboard. | On |
| Spotlight | Only a circle around the pointer is sharp, so a screenshot catches a few lines, never the page. | Off |
| Blur on idle | The room frosts after a minute without activity. | Off |
The honest limit
No web page can stop an OS-level recorder or a phone camera. The shield makes capture slow, partial, and traceable. And the watermark names whoever leaked it. Attempts are logged and counted on the link's activity.
Viewer content toggles
Each link also decides which extras the viewer sees:
| Toggle | Effect |
|---|---|
| Mako analysis | Viewers can read the AI summary of each document. |
| Extracted text | Viewers get a text fallback when page preview fails. |
| Viewer Q&A | Viewers can submit questions. They land in your Inbox and your answer is emailed back. |
| Viewer annotations | Viewers can draw private marks on the PDF. Visible only to them unless they attach one to a question. |