Read and annotate a private PDF

Local-first opening

Choose All Materials → + Add → PDF, or open PDF workspace directly, then choose a device file or deliberately submit one credential-free public HTTP(S) PDF URL. A `.pdf` pathname entered in Ratdolt's signed or public page field routes here with the address prepared for review; it makes no source request until Open public PDF is chosen. Extensionless PDF addresses can be entered directly in the workspace instead of being guessed from query labels.

After that explicit submit, public retrieval follows guarded redirects, accepts at most 50 MB, verifies the exact %PDF- byte signature and retains the final source address beside the on-device copy. PDF.js parses the resulting private byte copy in the tab. It can remain only in IndexedDB; encrypted files request the password per opening and never send or persist it. Public URL intake cannot use cookies or login state from another browser tab.

1. Open + Add → PDF, then choose a device file or review one prepared public PDF URL.
2. Choose Open public PDF to authorize its first source request; enter a password only if PDF.js requests it.
3. Search, navigate, listen or annotate the exact local document.

Backups and optional sync

Highlights, labels and notes reopen with the same on-device PDF. Download the byte-exact original or create a separately named PDF with visible highlight rectangles. Markdown/JSON retains editable labels and notes. An explicit private-cloud action can sync exact bytes plus revision-guarded research across browsers.

Edit bookmark changes only the chosen device or account display name. Reopening a renamed account copy never overwrites an independently curated device name, and neither path changes bytes, digest, source or research.