Protection · 6 sub-features

Send confidential docs
without losing sleep.

Password protection, dynamic watermark, auto-expiration, download blocking. Every layer of protection your audit, contract or pitch deck needs — in one toggle.

Protect my first doc →
01

Password protection

Lock any tracked link behind a password. Choose your own per-link, share it through a separate channel (SMS, signal, in-person). Document is unreadable without it.

How it works: Passwords are hashed server-side with bcrypt. The viewer hits a Postgres RPC to verify before the PDF is loaded. Brute-forcing isn't worth the time.
Why it matters: Send pricing, contracts, term sheets and audit findings without worrying about the link being forwarded.
tryrecon.app/v/h7k2-deck
This document is password-protected
••••••
Bcrypt · 12 rounds · revoke any time
02

Auto-expiration

Set a date and time. After that point, the link returns "expired" — the PDF is no longer accessible. Set it once, forget it. No need to manually revoke.

Use cases: Due diligence docs that expire after the meeting. Offer letters that self-destruct if not signed by Friday. Time-limited proposals.
Why it matters: Built-in urgency without awkward "as a reminder, this expires…" emails.
Days remaining
07
expires Mon, Apr 22
Views remaining
25
cap: 50 views
EXP
Link expired
404 returned to viewer · auto-revoked at 14:02
03

Dynamic watermark

Every page of the document is overlaid with a watermark containing the viewer's email address and the timestamp. The pattern is repeated diagonally across each page so screenshots can't easily crop it out.

How it works: When a viewer enters their email at the gate, that email is embedded as a CSS overlay on every PDF page. No image processing, just HTML — fast and pixel-perfect at any zoom.
Why it matters: If your confidential deck shows up on social media, the watermark traces it back to the leaker. Most leaks stop happening when people know they'd be identified.
Series A — Northstar Pitch.pdf
sarah@acme.co
04

Download blocking

Disable the download button entirely. The viewer can read the PDF in the browser, but can't save a local copy.

How it works: The download button is hidden, right-click is disabled inside the viewer, and Cmd+S / Cmd+P shortcuts are blocked.
Honest note: A determined attacker can always screenshot or print to PDF — this stops casual sharing, not state-sponsored espionage.
Viewer · view-only mode
Download
Right-click, save-as and print-to-PDF disabled in the viewer
05

Anti-screenshot & print blocking

Print and "Save as PDF" keyboard shortcuts (Cmd/Ctrl+P, Cmd/Ctrl+S) are intercepted. Right-click context menu is disabled inside the viewer area. CSS `user-select` is locked.

Why it matters: Combined with the watermark, this blocks 95% of casual leak attempts. Anyone who really wants to leak will, but they'll be doing it deliberately, not by accident.
Anti-capture controls
Print disabled
Screenshot mask overlay
Right-click blocked
Keyboard shortcuts blocked
06

GDPR-compliant tracking

A discreet "Powered by Recon · this view is being tracked" pill appears at the bottom of the viewer. Tracking is disclosed but not intrusive. No cookies, no third-party analytics calls.

What we don't store: No personally identifiable data unless the viewer voluntarily enters their email at the gate. The visitor token is anonymous and stored only in localStorage.
Why it matters: EU customers, regulated industries (legal, healthcare, finance) require GDPR-friendly tools. We're built that way by default.
Privacy & compliancePro
EU-only data residency
DPA template available
Auto-delete viewer data after 30 days
Cookieless tracking mode

Send confidential. Stay confidential.

Password + watermark + expiration in one toggle. Free trial, no card.

Start free →