The complete reading system
Free
$0forever
For occasional reading with the complete Reader, Composer and research workflow. Fidelity is never reduced.
3 new publications each month · 100 MB private storage
Start freePricing · one complete product
Pay for volume.
Never for fidelity.
Free and Pro use the same extraction, typography, page composition and research tools. Both include the unified private dashboard for collections and materials; Pro gives a serious reading habit more monthly capacity and both PDF delivery profiles.
131capabilities in the live contract
131rows in the public category map
0automatic overage charges
Free or Pro · one Pro level
Choose a billing rhythm.
$84 charged every year; $7 monthly equivalent. Save 42%.
Best value · save 42%
Pro annual
$84per year
$7 per month, billed annually, with the same monthly capacity and export profiles as Pro monthly.
50 new publications each month · 5 GB private storage
Choose annualMonthly and annual are billing cadences for the same Pro allocation—not separate feature tiers. Free and Pro are Ratdolt's only self-serve plans. Education remains a bounded inquiry through Review education.
Education & organizations
Evaluate a real web product before defining a contract.
Free and Pro above are the only purchasable plans. Ratdolt does not currently advertise unlimited seats, bulk provisioning, SSO/SCIM, a named success manager or a response-time SLA.
The Ratdolt contract
The page does not get worse when the plan is free.
Every plan receives the same source-order safeguards, layout engine and Reader geometry.
One credit covers up to 50 composed A4 pages. Reopening an existing Library object is free.
When the included allowance is used, Ratdolt stops. It never silently adds a charge.
Every capability
The full product map.
Available nowBetaIn construction
| Capability | Availability | Free | Pro |
|---|---|---|---|
| Reader | |||
| Distraction-free extractionRemoves site furniture while preserving source order and provenance. | Available now | Included | Included |
| Editorial page compositionCreates measured pages from authored layout systems, keeps headings with their opening content, enforces two-line widow/orphan cuts, avoids stranded short endings, rejects cross-engine glyph clipping or indivisible overset objects before Reader/PDF output, and requires reproducible browser-measured identity before pages become canonical. | Available now | Included | Included |
| Spread, continuous, grid and focus viewsFour arrangements over one immutable page set, production-proven in Chromium, Firefox and WebKit. | Available now | Included | Included |
| Images or text-only readingA deliberate content mode, never a degraded plan. | Available now | Included | Included |
| Page outline and direct folio navigationNavigate the generated structure without losing the page. | Available now | Included | Included |
| Keyboard, wheel and full-screen readingStandard page keys, direct folios and configurable shortcuts work without a mouse across the three production browser engines. | Available now | Included | Included |
| Browser Print comparisonMeasured A4 page counts plus native-PDF semantic coverage; percentages require complete text-only equivalence. | Available now | Included | Included |
| Clean PDF and native printCanonical Reader screen, both tagged PDF profiles and native A4 print share one measured page geometry. The visible Print action and Command/Ctrl+P mount the complete page tree while the browser retains destination, range, copies and Save as PDF ownership. | Available now | Standard | Both profiles |
| Composer | |||
| Paper, sepia, night and high-contrast themesPersonal reading stocks that never alter Reader. | Available now | Included | Included |
| Independent dark control panelNavigation and Composer controls can stay dark without changing the document theme, Reader, print or export. | Available now | Included | Included |
| Custom paper, text and link coloursA personal palette in the derived view with live text/link contrast ratios and a non-blocking WCAG AA warning. | Available now | Included | Included |
| Typeface, size, leading, tracking and measureChoose among 20 named bundled, system and device-local font stacks—or any safely named installed face—then tune reflowed typography and retain it across reloads. | Available now | Included | Included |
| Installed device-font choiceName a local font without uploading its file; invalid CSS syntax is discarded. | Available now | Included | Included |
| Active outline and source-detail controlsJump between recovered chapters on desktop or mobile, keep exactly one current section marked, and save the outline choice; figures, author, reading time and source URL remain independently reversible. | Available now | Included | Included |
| Reversible provenance-footer controlHide the Composer document footer without hiding the fixed original-source action or changing Reader, source truth, print or export. | Available now | Included | Included |
| Editable content and visual deletion toolOne browser-native Composer surface reaches Listen, Edit, Delete items, Translate, Print, Autoscroll, Settings, contextual Bookmark, the real Fullscreen API and Close. Edit outlines text, exposes paragraph and image controls, visibly saves automatically and treats Finish only as session exit; Delete outlines structural blocks for pointer or keyboard removal, advances focus and supports exact Undo/Restore all. Every correction remains a reversible overlay with source truth intact. | Available now | Included | Included |
| Scoped custom CSSLive preview and automatic workspace save; global selectors, remote URLs, executable and fixed-position CSS are removed. | Available now | Included | Included |
| Local automatic persistenceA Composer workspace survives reloads in the current browser. | Available now | Local | Local |
| Synced Composer defaultsExplicitly reuse one bounded theme, typography, display and accessibility setup for new documents across the account; existing workspaces remain untouched. | Available now | Included | Included |
| Cross-device Composer syncAccount workspaces reconcile local themes, edits, highlights and notes by source snapshot. | Beta | Included | Included |
| Selected-text Google Search and social sharingOpen selected text in a separate Google research window, use the Web Share sheet or copy a source-credited excerpt. | Available now | Included | Included |
| Accessibility | |||
| Reading rulerA fixed focus band with bounded colour, opacity, height and viewport position that persists with Composer defaults. | Available now | Included | Included |
| Text-to-speechWhole-document, exact selected-text and current-PDF-page playback uses bounded browser-speech chunks with visible progress, Stop, completion and error states. | Available now | Included | Included |
| Optional selected-text actionsKeep native browser selection while showing or hiding Ratdolt's highlight, selected-passage Reader, listen, search, translate, social post, share and settings toolbar. | Available now | Included | Included |
| Voice, rate and pitchChoose only from voices exposed by the current browser, tune bounded rate and pitch, and cancel safely on Escape, navigation or reload without sending reading text to a speech provider. | Available now | Included | Included |
| Synced narration defaultsExplicitly reuse one browser-voice name, rate and pitch in new Composer and PDF readings; missing device voices fall back locally. | Available now | Included | Included |
| Auto-scroll with speed and direction controlHands-free reading moves down or back up, keeps a fixed Pause action while active, stops for editing, deletion, Escape or the matching document boundary, and never restarts merely because a workspace reopened. | Available now | Included | Included |
| High-contrast themeA deliberate contrast mode rather than a mechanical inversion. | Available now | Included | Included |
| Reduced-motion friendly interfaceCore reading remains complete without animation. | Available now | Included | Included |
| Accessibility type choicesSelf-hosted Lexend/OpenDyslexic plus installed-device Lexie Readable, Sassoon Primary, Comic Sans or another safely named local face; no licensed font is silently downloaded. | Available now | Included | Included |
| Accessible research writingUse the reading serif, system sans, Lexend or OpenDyslexic while writing and previewing notes. | Available now | Included | Included |
| Browser document and selection translationChoose from 162 catalogued BCP 47 languages, preserve document structure, reuse an explicit preferred source → target pair across browser/account preferences and ask the current browser about that pair only when translating; temporary output never replaces source truth or syncs, and unavailable pairs keep an explicit external fallback. | Available now | Included | Included |
| Research | |||
| Custom highlight colours and labelsUse four semantic presets or up to 12 named colours in one account-synced global palette; optionally turn cross-folder sync off and give as many as 40 research folders their own reversible palette while unfiled work keeps the global fallback. | Available now | Included | Included |
| Highlight annotationsCreate an exact selected-text mark, then click its rendered passage to reopen one fixed mobile-safe editor for colour, note, folder, settings or deletion; private changes save automatically. | Available now | Included | Included |
| Highlight labelsName excerpts by theme, claim, method or any private research taxonomy. | Available now | Included | Included |
| Nested highlight foldersCreate an owner-private folder tree and move web, device-PDF or account-PDF excerpts without changing source anchors. An explicit revocable folder snapshot can freeze current account-backed excerpts across credited web sources and exact PDF digest/pages; device-only research stays local. | Beta | Included | Included |
| Reading notesA long-form note area per Composer workspace. | Available now | Included | Included |
| Standalone notes, tasks, papers and blog postsA private Markdown-compatible Research workspace with live preview, local draft recovery and a database-bounded object type. | Available now | Included | Included |
| Split research writing and previewKeep Markdown and its live reading view side by side on a wide screen, or choose focused Write and Preview views; Split stacks safely on narrow screens and the browser-only layout choice never changes note content. | Available now | Included | Included |
| Nested note topicsCategorize standalone notes, tasks, papers and blog posts in an owner-private six-level topic tree; topic names enter search and manual exports without entering public note projections. | Beta | Included | Included |
| Highlight-to-note compositionInsert a source-credited excerpt into the open note with an accessible button or drag-and-drop; label, annotation and folder context travel with it. | Available now | Included | Included |
| Public notes and highlightsOpt in one research object at a time; a highlight also requires a public source and profile. | Beta | Included | Included |
| APA, MLA, Chicago, Harvard and Vancouver citationsOpen Cite directly from a saved web publication, then generate from recovered source metadata or privately review title, author, publication and date without rewriting Reader. Exact access-date provenance, explicit warnings, complete copy, standalone HTML, Word-compatible DOC and native Print / Save as PDF travel with the corrections. | Available now | Included | Included |
| Find, search, translate and listen actionsAct on selected passages from one compact toolbar. | Available now | Included | Included |
| Markdown, text and portable JSON exportThe research layer remains portable. | Available now | Included | Included |
| Printable highlight PDFChoose Export highlights directly on a saved Library publication, then print a source-credited A4 research report containing the reading note, labelled excerpts, annotations and folder context through the browser's native Save as PDF path; the specialized intent clears after every print so later ordinary printing cannot inherit stale research. | Available now | Included | Included |
| Word, Evernote, Obsidian and email handoffThe same exact-publication export surface downloads DOC, text, ENEX, HTML or Markdown; a saved-source account can send a source-credited research email under a 5/hour and 20/day privacy-preserving limit, while a local mail draft remains available. | Beta | Included | Included |
| Markdown, HTML, text, JSON, ENEX and Kindle importsParse files under 2 MB locally, inspect and edit the complete normalized title/body, reject malformed JSON, discard active HTML/ENEX content, then save the draft as a note, task, paper or blog post. | Available now | Included | Included |
| Library research searchSearch bookmark details, exact source URLs, notes, note topics, highlight folders and passages from one private field. | Available now | Included | Included |
| Extracted body full-text indexingSearch recovered headings, paragraphs, lists, tables, code and figure text across the private Library, even when the words are absent from the bookmark title. | Available now | Included | Included |
| Web and PDF annotation parityApply the same account-synced global or folder-specific colour palette, labels, folders and notes to Composer text and local PDF pages; both selection surfaces return to one anchored Highlight Settings section, whose first control hides Ratdolt actions without disabling native selection or claiming unrelated tabs. | Available now | Included | Included |
| Notion note and highlight handoffCreate one private source-credited page from a note or highlight through public OAuth page selection, encrypted access/refresh rotation and one exact-request retry on 401. | Beta | Included | Included |
| Evernote note and highlight handoffCreate bounded ENML from a standalone note or source-anchored highlight through the implemented legacy OAuth 1/NoteStore adapter; Evernote now marks EDAM deprecated, so production credentials and live proof remain required. | Beta | Included | Included |
| Automatic provider highlight syncOpt in per connection for Composer publications or per local PDF to update one source-credited Notion page or Evernote note. | Beta | Included | Included |
| Library | |||
| One object per source URLReopening a source updates its identity instead of creating duplicates. | Available now | Included | Included |
| Credit-free Save for later and bookmark categoriesLibrary keeps article/URL, Saved images and PDF workspace intake as explicit browser-native routes with no extension permission; All Materials repeats them beside Research in one persistent + Add menu. Store a URL plus title, description, author, type, cover, favourite, archive state, visibility, collections and existing or comma-separated new tags without fetching the source. Browse Public, Favorites and Archived explicitly; optionally remember organization defaults only for future first-time saves. Existing and trashed source identities are never silently reorganized. | Beta | Included | Included |
| Source-safe cross-format bookmark editingOpen one explicit editor from All Materials. Curate publication title, description and author without overwriting canonical source fields; edit a preserved image's title, alternative text and tags without replacing its bitmap or provenance; and name browser and account PDF copies independently without changing bytes, digest, source or research revision. Removal names the exact authority and surviving counterpart before any permanent delete. | Beta | Included | Included |
| Typed articles, sites and mediaClassify articles, sites, images, video, audio/podcasts, maps, social links and documents/books independently from capture mode. | Beta | Included | Included |
| Private saved-image repositoryPreserve an extracted Composer figure or upload a PNG, JPEG, WebP or GIF, then search, tag, edit, download or delete it from the web Library. | Beta | Included | Included |
| Private file storageOne atomic account allowance covers preserved images, opt-in cloud PDFs and permanent snapshot plus portable-HTML editions; deleting an indexed object releases its bytes. | Beta | 100 MB | 5 GB |
| Unified private material dashboardOpen Dashboard directly from signed-in navigation, use + Add for URL/bookmark, image, PDF or Research even in a populated view, then search, filter, sort and switch List, Grid or Tag View across bookmark collections, all web readings or exact article/site/video/audio/map/social/document kinds, saved images, private PDFs, standalone notes and source-anchored highlights. Loading, genuinely empty, no-match and recoverable read-error states keep their distinct next action. | Beta | Included | Included |
| Private instant material suggestionsAfter two characters, choose up to eight owner-scoped title, detail, URL or full-text matches by pointer or Arrow keys and Enter; submit the complete search when no suggestion is active, while device-only PDF names join locally without entering the account request. | Beta | Included | Included |
| Account and on-device PDF identity mergeA SHA-256 digest joins an optional private account copy to the same PDF already available in IndexedDB; device-only names and metadata never enter the database index. | Beta | Included | Included |
| Custom bookmark coversChoose any owner-preserved bitmap or upload a new one without duplicating storage; the private shelf, Instant Preview, public profile, collection, Reading Commons and embed share one revocable cover identity. | Beta | Included | Included |
| Attributed Unsplash coversSearch landscape photography from the bookmark editor, keep the selected image hotlinked with its required tracking token, report the official selection event and show photographer credit on every private or public cover surface. | Beta | Included | Included |
| Cover-led private shelfSaved publications appear as reading objects, not database rows. | Available now | Included | Included |
| Private reading resumeA dwell-gated monotonic fraction returns an active owner to the same folio across Spread, Continuous and Focus; Grid, print, text and scroll events are never reading-history records. | Beta | Included | Included |
| Version detectionSource digests distinguish a check from a changed edition. | Available now | Included | Included |
| Private permanent source copiesContent-addressed replay snapshots and inert source-styled HTML preserve verified static resources, remain pixel-faithful after the origin disappears and recover only within the same fidelity class. | Beta | Included | Included |
| One-file permanent HTML editionsA successfully composed saved source automatically receives one immutable edition when private storage is available. Raw-HTML captures preserve static source CSS, fonts and guarded images; browser-semantic captures fall back to the measured Ratdolt edition. Both remove active/third-party surfaces, are dependency-free and bounded to 70 MB, while a private seven-day queue retries missing resources. Unopened URL bookmarks stay honestly Source-linked. | Beta | Included | Included |
| Explicit offline article and PDF shelvesKeep selected one-file editions and local PDFs behind public cached shells. Content-addressed account editions carry an RFC 9530 SHA-256 digest that is checked before IndexedDB; every local article keeps its own digest, identical saves retain their original time, and only a strictly more complete same-version resource set can replace valid bytes. Missing or corrupt rows stay visible and recoverable, quota failures preserve the prior commit, reading frames allow no scripts/forms, and sessions, APIs and private Library pages are never service-worker cached. Chromium, Firefox and WebKit pass real recovery, server-stop reopen and byte-exact downloads. | Available now | Included | Included |
| Installable website and Share-menu intakeThe full product remains a website; an optional standards-based install adds its own window and accepts a deliberately shared public URL on supported browsers without extension permissions. | Available now | Included | Included |
| Immutable version historyEach changed source digest becomes a separately reopenable and portable Library edition. | Beta | Included | Included |
| Archive, Trash, restore and confirmed deletionArchive organizes without deletion intent. Trash is a separate reversible privacy boundary that blocks new copies, revokes active shares and must precede permanent deletion. | Available now | Included | Included |
| Title and source searchFilter the current shelf and archive. | Available now | Included | Included |
| Public profile opt-inFrom Dashboard, search Profile in All tools to reach the exact Account section. Identity, bookmarks and collections start Private; only separately Public objects reach the anonymous read-only username page, with no visitor editing authority. | Available now | Included | Included |
| Custom public profile identityEdit display name, bio, location, private birthday with separate month/day consent, website and provider-bound social links from one browser-native Account surface. Preview verified avatar and cover bitmaps locally before an explicit account save, or choose an attributed Unsplash photo without exposing an account UUID or birth year; the no-account tour never mutates a profile or provider. | Beta | Included | Included |
| Nested collections, icons and intersecting tagsCreate folders Private by default, show each Private/Unlisted/Public state in Library, organize source bookmarks without flattening collection hierarchy, choose a bounded semantic icon for every folder and require every selected tag inside the whole Library or one active collection. A deliberate Public choice receives a read-only collection page; it shows only independently public parent and direct-child folders, so a private parent remains undisclosed. | Available now | Included | Included |
| Cross-format collections as dashboard objectsFind, filter and open folders beside every saved object; one private collection can retrieve publication, saved-image and account-PDF bookmarks while highlight folders and note topics remain separate research taxonomies. | Beta | Included | Included |
| Move bookmarks between collectionsDrag a publication, saved image or PDF from its active folder onto another, or use the equivalent keyboard form; unrelated memberships stay intact and device-only PDFs remain local. | Beta | Included | Included |
| Cross-material tagsClassify subjects, approaches, statuses, evaluations or personal workflows with one owner tag vocabulary across publications, saved images, private account PDFs, notes and highlights. Keep up to 100 memberships per object, select existing labels or create up to 20 new comma-separated names inside the same editor, then refine the whole Library or one collection with one or several match-all tags. A device-only PDF keeps membership solely in IndexedDB even when a new name enters the private account vocabulary. | Beta | Included | Included |
| List, Grid and Tag View with label controlScan separate text rows, browse owner-safe image previews or semantic covers on an equal-footing grid, hide labels without losing exact accessible links, or group one loaded page by its private tag vocabulary while the unique object count remains stable. | Available now | Included | Included |
| Saved chronology and date sortingOrder the complete owner-scoped result by update, immutable saved time in either direction, last open or title before count and pagination, with deterministic ties; keep manual collection rank and publication-only progress as separate meanings while device PDFs merge locally. | Available now | Included | Included |
| Private reading progress and shelf controlsAfter a deliberate Reader dwell, preserve only the furthest page fraction and last-opened time for that owner's active publication—never page text or a scroll-event history—then filter content kind separately from extraction and sort by saved date, update, open time, title or progress. | Available now | Included | Included |
| Four-view Instant PreviewInspect stored text or click-gated image, audio, video and bounded map media, open a deliberately loaded live web view, revisit permanent versions and review source highlights without leaving the Library; third parties receive no request until that media or Web view is explicitly loaded. | Beta | Included | Included |
| Pocket and Instapaper migrationPreview Pocket HTML/CSV or RFC-4180 Instapaper CSV locally, then de-duplicate private bookmarks while preserving archive state, favourites, folders, tags, selections and available dates. | Beta | Included | Included |
| Public publications, research and collectionsPublish a shelf object, bounded note preview, complete note page or ordered collection only after explicit opt-in; anyone may view the resulting read-only page without signing up, but cannot edit it. | Available now | Included | Included |
| Independently public image and PDF bookmarksPlace an explicitly public saved bitmap or account PDF inside an explicitly public collection on an explicitly public profile. The deduplicated public shelf, profile embed and collection surfaces use opaque first-party delivery that rechecks all three choices; PDF annotations stay private and public PDFs download instead of opening an ambient workspace. | Beta | Included | Included |
| Revocable cross-format collection linksCreate one unique high-entropy URL for an owner-ordered collection of web bookmarks, verified images and download-only PDFs. Anyone holding it may view without signing up but cannot edit; the profile remains unpublished, and rotation, disablement or removing a file invalidates the former access path while snapshots and PDF workspaces never cross the grant. | Beta | Included | Included |
| Reading Commons discovery and private save-copySearch the whole current public projection and continue through stable pages of doubly opted-in readings or collections; save an unfetched private bookmark or a bounded 100-member collection copy without inheriting snapshots, research or another account identifier. | Beta | Included | Included |
| Private Following feedFollow an explicitly public reader from their profile and see only their currently public readings and collections; aggregate counts are public, while the roster and feed membership remain account-private. | Beta | Included | Included |
| Bulk Library actionsFavorite, archive, trash, restore, publish, tag or collect up to 200 selected publications. | Available now | Included | Included |
| Portable collection embedsOpen Embed on an ordinary Public collection or in Collection settings, copy one bounded lazy/no-referrer sandboxed iframe and paste it into a website or blog. The owner-ordered, source-credited web, independently public image and download-only PDF gates remain live inside the frame. | Available now | Included | Included |
| Portable profile embedsOpen Embed on an ordinary Public profile or in Account, copy one bounded lazy/no-referrer sandboxed iframe and paste it into a website or blog. Its globally ordered public web/image/PDF shelf exposes no private account or collection identity. | Available now | Included | Included |
| Collection collaboratorsInvite any email as Viewer or Editor; confirmed-email claim, 30-day pending expiry, private save-copy, bounded source contribution, ordering/removal and an owner-only roster keep access useful and revocable. | Beta | Included | Included |
| Drag and keyboard collection orderingPrivately order account-backed publications, saved images and PDFs as one sequence with drag or adjacent keyboard controls. Shared Viewer/Editor collections retain their separate publication-only order and authorization boundary. | Beta | Included | Included |
| Capture, sharing and integrations | |||
| Public URL captureStatic HTML stays the fast path; a sparse or unusable public JavaScript shell gets one bounded comparison in fixed Chromium. Fresh cookie-less contexts, public-network checks and semantic completeness preserve the website-only boundary. | Available now | Included | Included |
| Owner-verified site print manifestsA same-host HTTPS well-known JSON file declares content roots, exclusions and image permission before public acquisition and cache lookup; text-only claims block browser image requests, while no manifest can relax access or safety policy. | Available now | Included | Included |
| Email, Google and X account accessUse email/password or a linked social identity. The X identity itself is sign-in only; command-based intake requires a separate explicit consent. | Beta | Included | Included |
| Guarded account lifecycle self-serviceChange a route-safe username, confirm email changes, verify the current password before replacement and preserve one usable password or social sign-in method. Explicit billing-clear deletion removes account-owned profile media, images, cloud PDFs, interrupted PDF uploads and permanent copies before the auth owner; device-only files remain browser-controlled. | Available now | Included | Included |
| Opt-in X reply and DM savingAfter separate consent, a signed Account Activity webhook turns deliberate @Ratdolt save commands into private URL stubs without retaining the message, fetching the source or spending a credit; leased bot writes can confirm the save once. | Beta | Included | Included |
| Bounded X thread editionsOpening a save-thread bookmark can read up to a configured 10–100 same-author posts through full-archive search, mark a longer thread partial, and preserve the attributed result as an ordinary private snapshot only after storage and credit checks pass. | Beta | Included | Included |
| Browser-native Auto-run rulesRoute matching domains, URL wildcards or bounded safe regex patterns to Reader or Composer when a public URL enters Ratdolt; first-match precedence, reordering and shadow warnings remain explicit. Composer's six-family settings map links to the exact Account owner without implying cross-tab authority. | Available now | Included | Included |
| Visible product navigator and focused-tab shortcutsChoose All tools beside the signed-in URL field, or press Command/Ctrl+K or ? anywhere inside Ratdolt, to search 24 fixed first-party destinations including Reader, Composer, bookmarks, previews, Collections, Tags, images, PDFs, notes, portable integrations, Website settings, Highlight Settings, Account and Help. Website settings indexes theme, highlight actions, translation-pair and focused-tab-key owners; slash focuses a visible public-URL field without claiming operating-system, extension or unrelated-tab authority. | Available now | Included | Included |
| Synced reading defaults and shortcutsCarry opening mode, Reader arrangement and custom keys across an account. Composer maps Typography, Display, Themes, Reading ruler, Auto-run rules and Custom CSS to their exact in-view or Account owner while canonical Reader remains unchanged. | Beta | Included | Included |
| Private capture boundaryShort-lived bearer access keeps deliberately submitted content out of public URL caches and share links. | Available now | Included | Included |
| Source-based Reader linksShare a reproducible public Reader request. | Available now | Included | Included |
| Problem reports with stage contextFailures carry source, stage and publication context. | Available now | Included | Included |
| First-party contact and feedbackAsk a product or billing question, send feedback or report a bug through Ratdolt's own bounded form; only explicit fields enter the support envelope, provider-free email fallback remains visible and private source material is never attached. | Available now | Included | Included |
| Immutable annotated share snapshotsChoose Share on a saved article, open Composer Export and freeze one distraction-free page with no owner research or with only the selected highlights and note; private edits and workspace metadata never cross the link. | Beta | Included | Included |
| Collaborative shared readingsOpen the unlisted reading and invite any email as Editor or Viewer; the confirmed account adds only an attributed highlight/note layer while the source, owner-selected research and every other contribution remain frozen and separately revocable. | Beta | Included | Included |
| Private local PDF intakeChoose All Materials → + Add → PDF or open the workspace directly, then open encrypted or rotated PDFs up to 50 MB locally by default. Incorrect passwords are rejected and cleared; the correct password is neither transmitted nor persisted and is requested again on reopen. | Available now | Included | Included |
| Public-web PDF intakeAn explicit `.pdf` pathname in Ratdolt's page field prepares the credential-free HTTP(S) address in the PDF workspace without fetching it; extensionless PDFs remain a direct workspace choice. Only Open public PDF authorizes the guarded server fetch, which vets every redirect, enforces 50 MB, verifies the %PDF- byte signature and returns the exact file locally without cookies or login authority from another tab. Final source provenance remains attached to the browser copy. | Available now | Included | Included |
| Local PDF search and full speech controlsIndex up to 1,500 pages, navigate results and narrate bounded current-page chunks with a browser voice plus 0.5–2.0 rate and pitch, visible lifecycle status and page-change cancellation while keeping document text on device. | Available now | Included | Included |
| Local PDF highlights and notesStore page-relative custom colour, semantic label, note and quote anchors against the file digest. | Available now | Included | Included |
| On-device PDF libraryOptionally reopen recent local files from IndexedDB; monotonic saves prevent older asynchronous research from overwriting newer edits. Structural checks hide missing-byte ghosts, resolve each partial layer independently and disclose browser quota/eviction. Off-screen page bitmaps are released. | Available now | Included | Included |
| Exact original-PDF backupDownload the byte-for-byte retained PDF from its local shelf or open workspace with a portable safe filename; annotations stay in the separate Markdown/JSON research layer. | Available now | Included | Included |
| Annotated PDF copyGenerate a separately named PDF with visible highlight rectangles embedded locally in the original page geometry, including after the server is offline. The exact original remains unchanged; editable labels and notes stay in Markdown/JSON. | Available now | Included | Included |
| Optional private cloud PDF copiesAfter an explicit save, upload directly through a signed private-storage grant and reopen the exact SHA-256 file plus revision-guarded annotations across browsers; links expire and concurrent changes never overwrite silently. | Beta | Included | Included |
| Portable PDF research import and exportImport bounded JSON only when its SHA-256 identity matches the open PDF, download Markdown/JSON, or explicitly sync annotation text to Notion/Evernote without exporting the private source file. | Available now | Included | Included |
| Notion OAuth connectionAuthorize through Notion's public page-picker flow; encrypted owner-scoped tokens rotate behind a service-only lease, disconnect requests revocation, and API 2026-03-11 uses in_trash for an empty projection. | Beta | Included | Included |
| Evernote OAuth connectionThe implemented legacy OAuth 1/NoteStore boundary supports manual handoff and queued automatic highlight updates, but Evernote now marks EDAM deprecated; deployment still requires approved credentials and live proof, while ENEX remains independent. | Beta | Included | Included |
| Kindle, Instapaper, Pocket and Obsidian file exchangeUse one browser-native Transfer route for deterministic Kindle clippings, current Instapaper CSV/text/Markdown/HTML exports, legacy Pocket HTML/CSV migration and Obsidian Markdown in either direction. Pocket is retired; no dead provider connection is claimed. | Available now | Included | Included |
| Plan and delivery | |||
| New publication creditsOne credit covers the first successful composition of a source, including an imported or command-saved bookmark, up to 50 composed A4 pages. | Available now | 3 / month | 50 / month |
| Existing Library reopenReopening an existing publication does not use another monthly credit. | Available now | Included | Included |
| No fidelity paywallFree and Pro use the same extraction, composition and page geometry. | Available now | Included | Included |
| No automatic overageRatdolt never silently charges after the included allowance. | Available now | Included | Included |
| Transparent subscription lifecycleStripe hosts payment details, invoices and plan controls; cancellation preserves Pro through the paid term, payment failures receive bounded retry grace and notice, and a return to Free keeps the Library intact. | Available now | Included | Included |
| PDF delivery profileFree receives the standard artifact; Pro can choose print-quality or smaller-file. | Available now | Standard | Both profiles |
| Searchable browser-native help centerSearch practical guides plus every public capability row from the same product contract used by landing and pricing; each guide states its local, account, provider or public-network boundary. | Available now | Included | Included |
| Inspectable web security and disclosurePublish the website's actual authority boundary, deny unused browser capabilities, prevent ordinary cross-origin framing, isolate the offline cache and expose an expiring RFC 9116 vulnerability-reporting route without claiming zero supply-chain risk. | Available now | Included | Included |
“In construction” is a transparent roadmap marker, not a claim that the capability is available. Live status is updated from the same product contract used by the landing page.
Plain answers
Before you choose.
Can I use Ratdolt for free?
Yes. Free has no recurring charge and includes 3 new publications each month plus 100 MB private storage. It keeps the same extraction, Reader geometry and source-order protection as Pro.
How are Free and Pro different?
They share the complete reading and research workflow. Pro monthly and Pro annual raise the allowance to 50 new publications each month and 5 GB private storage; Pro also unlocks both PDF delivery profiles. Free keeps the standard PDF artifact.
Can I pay monthly or annually?
Pro monthly is $12 per month and Pro annual is $84 per year. Both are recurring subscriptions until renewal is canceled; annual is billed as one yearly charge, not as monthly installments.
How is payment processed, and is PayPal guaranteed?
Stripe Checkout hosts payment entry, and Ratdolt does not receive card numbers. Ratdolt does not currently advertise or guarantee PayPal; checkout shows the payment methods Stripe makes available for that deployment and customer.
What happens if I cancel Pro?
Use Stripe’s secure billing portal to stop renewal. Pro remains available through the paid term, then the account returns to Free. Cancellation does not erase the Library, and starting another Pro term always requires a deliberate checkout.
What happens if a subscription payment fails?
While Stripe reports past due, Pro remains available during Stripe’s configured retry schedule and Billing points to the secure portal for a payment-method update. Ratdolt promises no fixed retry count or timing. If Stripe reports the term unpaid or ended, Free allowances apply and saved Library work remains intact.
Does Free have a worse Reader?
No. Extraction, layout quality, images, reading modes and source-order protection are the same on every plan.
What uses a publication credit?
Creating a new composed publication of up to 50 A4 pages. Failed compositions and reopening an existing Library object do not use another credit.
What counts toward private storage?
Preserved Library images, explicitly uploaded private cloud PDFs, permanent source snapshots and the current portable one-file HTML edition of each version. A partial edition may be replaced by a better recovered revision, but only the committed current revision counts. Device-only PDFs, notes and metadata do not consume this file allowance. Ratdolt stops a write before exceeding the limit and never charges an overage.
Is Ratdolt a browser extension?
No. Ratdolt is a browser-native website. Select to Read accepts deliberately copied rich content, browser-saved HTML/MHTML/MHT/Safari WebArchive or an exact passage plus its source. MHTML contributes only its declared HTML root; WebArchive contributes only its main HTML resource. Attachments, subresources and subframes are ignored. The browser removes links, images, active surfaces and attributes before the semantic reading reaches Ratdolt; cookies and page credentials never leave that browser session.
What stays on this device?
PDFs stay local by default, PDF passwords remain only in the PDF.js opening attempt, and browser language-pack translations stay local. A wrong password is cleared; the correct one is never sent or persisted and is requested again on reopen. All Materials merges an on-device PDF's name and metadata in the browser; it does not add device-only PDF bytes to the account index. A selected Permanent Copy can separately enter the explicit offline device shelf; current content-addressed account editions are checked against their RFC 9530 SHA-256 digest before IndexedDB, and missing or corrupt local bytes remain visibly recoverable. /offline/pdf prepares PDF.js, its dynamic chunks, worker and annotated-export runtime so already-local PDFs—including encrypted ones—can reopen without a network. Download the byte-exact original, create a separately named copy with visible highlight rectangles, or keep editable labels and notes in portable Markdown/JSON; these are intentionally different artifacts. Portable research JSON is capped at 2 MB, must match the open PDF's exact SHA-256 identity and never replaces a same-ID local annotation. The shell reports origin-wide usage/quota and whether storage is browser-managed or persistent; requesting persistence is not a guarantee against user or system deletion. Structural checks do not display missing-byte ghosts, can reindex digest-verified bytes and keep bounded research for exact-file recovery. Those public shells cache no session, API or private Library page. Signing out does not remove device bytes, browser cleanup may, and anyone using that browser profile can open them until you remove them. An explicit “Save private cloud” action may upload PDF bytes directly to private account storage; Composer can separately sync its bounded overlay.
Start with the source in front of you