How to see who opened your PDF and which pages they read

You can't reliably see who opened a PDF you attached to an email: once the file lands in someone's inbox, it is their copy, and it reports back to nobody. What you can do is share a link to the PDF instead, so it opens in a viewer that records each visit and the time spent on each page. This guide walks through every method people try (read receipts, tracking pixels, PDFs that "phone home" and tracked links), what each one really tells you, what none of them can tell you, and how to do it without being creepy.

Why an attached PDF can't tell you anything

An attachment is a copy. Once sent, it lives entirely on the recipient's side: in a browser tab, a phone preview, a desktop PDF reader or a printer tray. None of those report back to you, and nothing in an ordinary PDF asks them to.

So every tracking method falls into one of two camps. Some watch the email around the PDF and guess from that. Others keep the document on a server and let people read it there, so the server can see what happens. Only the second camp can tell you anything about pages.

Read receipts: polite, optional and patchy

A read receipt is a request, sent with your email, asking the recipient's mail program to confirm when the message is opened. It's the oldest trick in the book, and the most honest one, because the recipient is asked.

In classic Outlook for Windows, you tick Request a Read Receipt in the Tracking group of the Options tab before sending. Microsoft is frank about the limits. The recipient can decline, there is no way to force a receipt, and the feature isn't available for IMAP or POP accounts such as Gmail, Yahoo! or iCloud.

Gmail is stricter still. Google says read receipts work only for work or school accounts, not for personal @gmail.com addresses. Receipts aren't returned for messages sent to a group mailing list or alias, and Google's own help page warns that getting one doesn't always mean the person read your message.

Even when a receipt does arrive, it is about the email. It says nothing about whether the attachment was opened, let alone whether anyone made it to page 9.

Tracking pixels: they watch the email, and mail apps fight back

A tracking pixel is a tiny, usually invisible image in the body of an email. When the recipient's mail app loads it, the sender's server logs the request and calls it an "open". The European Data Protection Board describes exactly this use: a sender can include a pixel in an email to detect when the receiver reads it.

Pixels have two big problems.

1. Mail apps block or pre-load them. Classic Outlook blocks automatic picture downloads from the internet by default, and Microsoft lists avoiding tracking pixels as one of the reasons. Apple Mail's Protect Mail Activity does the opposite: it downloads remote content in the background whether or not the person engages with the email, and hides their IP address. One app reports no opens; the other reports opens that never happened.
2. They still only watch the email. Like a read receipt, a pixel sits in the message body. Your PDF can lie unopened in the attachment strip while the pixel cheerfully reports a "read".

PDFs that "phone home": possible, but a bad idea

A PDF can contain links, forms and scripts, and some people have tried to use them for tracking: when the file opens, it quietly calls a web address that logs the visit. It sounds clever. In practice, the reader's software stands in the way.

Adobe's security documentation for Acrobat and Reader explains why. When a PDF talks to the internet, malicious content can come back the other way, and form fields can hide JavaScript calls that open a page. Acrobat can therefore warn whenever a document tries to reach a site that isn't on the reader's allow or block list, and administrators can block such access altogether.

The likely outcomes, then, are that the call is ignored, that it's blocked, or that your reader sees a security warning and starts wondering whether your proposal is malware. It is also tracking the reader hasn't been told about, which matters for the privacy section below. Put simply: don't.

Tracked links: the method that actually works

The reliable approach is to stop sending the file and send a link instead. The PDF stays on a server. The reader opens the link in a browser and reads it there, page by page. Because the viewer is the thing showing each page, it can record which page was on screen and for how long.

Several services work this way, and they differ in what they record and who can see it:

• Google Drive's Activity dashboard. When Google launched it in 2018, it covered Docs, Sheets and Slides files, was shown to people with edit access in the owner's organisation, was limited to business, enterprise, education and nonprofit editions, and let viewers keep their own views out of it through their privacy settings. It records who viewed and when, not time per page. Our comparison of Google Drive sharing and a tracked link covers the details.
• DocSend, now part of Dropbox. Its Activity tab lists visits across all of a document's links, with a chart of time spent per page. Dropbox's help notes that visitors can be named only when the link requires an email, and that locations can be wrong for someone on a VPN.
• Breathier, a free tool built for exactly this job. You share a document as one or more links and see, for each visit, how long was spent on every page.

How the methods compare

What a tracked link can show you

Taking Breathier as the example, each visit to a link records:

• the email address, if that link asks for one;
• when the visit happened;
• the device type (phone, tablet or computer) and the country;
• the total reading time, and the time spent on each page;
• whether the file was downloaded.

A chart shows the average time on each page across all visits, and you can filter visits by link. Your own look at your link isn't counted, so checking it before sending doesn't inflate the numbers.

What no method can tell you

Even a good tracked link has blind spots. It helps to know them before you read too much into a number.

• Who is really reading. If a link asks for an email, the reader types it in; on Breathier it isn't verified. Anyone with the link can claim to be anyone.
• Whether they were paying attention. Breathier counts reading time only while the tab is visible and the reader has scrolled, tapped or moved in the last five minutes. That filters out a tab left open overnight, but four minutes on page 3 might still be four minutes of thinking about lunch.
• Who else saw it. A colleague reading over a shoulder, a link forwarded to a partner, a deck shown on a meeting-room screen: all look like one visit, or like a visit from someone you didn't send it to.
• What happens after a download. You'll see that the file was downloaded, but the downloaded copy is just a file again, as untrackable as an attachment.
• Screenshots and photos. Turning downloads off hides the button and blocks printing from the viewer, but anyone can take a screenshot.
• Exactly where they are. Country is usually worked out from the network connection, and as Dropbox notes for DocSend, a VPN can put someone somewhere they aren't.

Our guide to what time on each page tells you goes deeper on reading these numbers without fooling yourself.

How to track a PDF with Breathier, step by step

1. Sign in with your email or Google account. It's free, and your readers won't need an account.
2. Upload the PDF. Files can be up to 50 MB. Nothing is converted, so readers see your pages exactly as you made them.
3. Create a link for each recipient, named after them, such as "Acme Ventures" or "Board pack: Priya". One document can have up to 50 links, and one link per person is what lets you tell visits apart.
4. Set the link's rules. Ask for an email if you want a name against each visit; add a passcode for anything sensitive; set an expiry date; and choose whether to allow downloads. Our guide to password-protecting a shared document helps you decide.
5. Send the link however you like: email, WhatsApp, LinkedIn or Slack. Pasted into those apps, it shows the document's title and first page, except on links with a passcode.
6. Check the statistics. Breathier doesn't email you when someone opens a document, so look in when you're ready to follow up.
7. Switch the link off when you're done. It closes at once, and anyone still reading is closed out within seconds.

Privacy and consent: track people the way you'd want to be tracked

Watching how someone reads is personal, even when it's a sales proposal. On the legal side, in October 2024 the European Data Protection Board adopted guidelines stating that tracking pixels and tracking links distributed by email fall within Article 5(3) of the ePrivacy Directive. That article allows storing or reading information on someone's device only with their consent or where it is necessary for specific purposes. Rules differ between countries, and this isn't legal advice, but the direction is clear: secret tracking is the risky kind.

Breathier is built to be open about it. Readers are told on the link's page that the sender can see they opened it and how long they spend on each page, and a privacy page explains what is recorded. That's a sound baseline whatever tool you use.

Some good habits on top:

• Say so. A line such as "I've shared it as a link so I can see it reached you" removes any sense of surveillance.
• Use the signal, don't quote it. Knowing a client spent a while on the pricing page is a good reason to call. Telling them "you spent 3 minutes 40 seconds on page 6" is a good way not to get the deal. Our guide to sharing a pitch deck with investors covers timing a follow-up.
• Tidy up. Switch off links you no longer need.

You'll find more on sharing and reading documents in the resources hub.

FAQ

Can I see if someone opened a PDF I attached to an email?

Not reliably. A read receipt or tracking pixel can hint that the email was opened, but neither knows anything about the attachment. To see whether the PDF itself was read, share it as a link to a viewer that records visits.

Do read receipts work with personal Gmail accounts?

No. Google says read receipts are available only for work or school accounts, and they don't work for personal @gmail.com addresses. Outlook's read receipts also aren't available for IMAP or POP accounts such as Gmail.

Can a PDF track who opens it on its own?

A PDF can contain links and scripts that try to contact a website when it opens, but reader software is designed to resist this. Adobe Acrobat and Reader can warn whenever a document tries to reach a site that isn't on the reader's allow or block list, and administrators can block it. It's unreliable and makes your file look suspicious.

Is it legal to track who opens a document?

It depends on where you and your readers are and how you track. In the EU, regulators treat email tracking pixels and links as covered by the ePrivacy Directive, which allows it only with consent or where it is necessary for specific purposes. Being open with readers about what is recorded is the safest habit.

Will the reader know I can see that they opened it?

With Breathier, yes: the link's page tells readers that the sender can see they opened it and how long they spend on each page. Other tools differ, so check before you rely on one, and consider telling people yourself.

What happens if they forward my link?

Whoever opens the forwarded link appears as another visit on that link, and if the link asks for an email, they'll type their own (or someone else's). That's why one link per recipient helps: an unexpected visit on a named link is a sign it travelled. You can switch the link off at any time.

Sources

• Microsoft Support: Add and request read receipts and delivery notifications in Outlook: how to request a read receipt, that recipients can decline, and that it isn't available for IMAP or POP accounts.
• Gmail Help: Request or return a read receipt: read receipts only for work or school accounts, not personal Gmail, not for group lists, and not proof of reading.
• Microsoft Support: Block or unblock automatic picture downloads in classic Outlook email messages: pictures blocked by default, partly to avoid tracking pixels.
• Apple: Mail Privacy Protection & Privacy: Protect Mail Activity downloads remote content in the background regardless of engagement and hides the IP address.
• Adobe Acrobat Application Security Guide: External content access: why PDFs contacting the internet are a risk, hidden JavaScript in form fields, warnings and blocking.
• European Data Protection Board: Guidelines 2/2023 on the technical scope of Art. 5(3) of the ePrivacy Directive, version 2.0 (PDF): email tracking pixels and links fall within Article 5(3); consent or necessity required.
• Google Workspace Updates: Activity dashboard launch (March 2018): file types, who can see the dashboard, editions at launch and viewers' privacy settings.
• Dropbox Help: Using the Activity tab in Dropbox DocSend: visits, time per page, visitor identification only with an email requirement, and VPN location caveat.