![\"Discovery](\"https://raw.githubusercontent.com/Juli1artha/discovery-media-player/main/assets/logo-dark.svg\"){kind=logo}
\n\n\n**Send a document. Know if it was read.**\n\nA self-hosted document viewer with per-recipient tracked links, reading analytics,\nand live presentation — for teams who would rather not hand their commercial documents\nto a third-party SaaS.\n\n[](https://github.com/Juli1artha/discovery-media-player/actions/workflows/ci.yml)\n[](https://github.com/Juli1artha/discovery-media-player/actions/workflows/codeql.yml)\n[](https://scorecard.dev/viewer/?uri=github.com/Juli1artha/discovery-media-player)\n[](https://www.bestpractices.dev/projects/14197)\n[](https://www.npmjs.com/package/discovery-media-player)\n[](https://github.com/Juli1artha/discovery-media-player/pkgs/container/discovery-media-player)\n[](package.json)\n[](LICENSE)\n\n
\n\n
![\"The](\"https://raw.githubusercontent.com/Juli1artha/discovery-media-player/main/assets/captures/viewer.png\")
\n\n\n\n
![\"Folder](\"https://raw.githubusercontent.com/Juli1artha/discovery-media-player/main/assets/captures/folder.png\")
\n\nFrom source, the same thing:\n\n```bash\ngit clone https://github.com/Juli1artha/discovery-media-player\ncd discovery-media-player && npm install\nPLAYER_LOCAL_ROOT=./documents npm start\n```\n\nThat is the whole demo. Tracked links, analytics and live presentation need a database —\nsee [Going further](#going-further).\n\n---\n\n## Why this exists\n\nSending a PDF by email tells you nothing. Did they open it? Did they reach the page with the\nprice? Did they forward it? The products that answer those questions are SaaS: your commercial\ndocuments, your prospects' email addresses and your reading data live on someone else's servers.\n\nThis player answers the same questions and runs on your own infrastructure.\n\n| | What you get |\n|---|---|\n| **Tracked links** | One link per recipient. Revocable. Re-shares are chained to their parent, so you see when a document travels. |\n| **Reading analytics** | Time per page, furthest page reached, device. Counted only while the tab is visible and recently active — a hidden tab, or one idle past the threshold, is not reading. |\n| **Live presentation** | Present a document to a remote audience, with chat, presence, and handover. The audience follows your page without a video call. |\n| **Access wall** | Optional: a document can require an email + code before it opens. |\n| **Brand per client** | The loader carries your client's logo, resolved at display time — fix a logo and links already in inboxes follow. |\n| **Anything on disk** | PDFs and images from a local folder, from S3-compatible storage, or from your own application's file route. |\n\nTwo populations are never merged: a prospect reading your proposal and a colleague re-reading\nit in-house produce different records. Mixing them makes \"this prospect read for 12 minutes\"\na lie, which is worse than having no number at all.\n\n### What it displays\n\n| Format | Status | What that means |\n|---|:---:|---|\n| **PDF** | ✅ | The format the player is built around. Rendered by pdf.js, progressive — the first page shows before the file has finished arriving. Per-page reading time, furthest page reached, page-level presenter sync. |\n| **Images** — `.png` `.jpg` `.jpeg` `.webp` `.gif` `.avif` | ✅ | Displayed, zoomable, tracked as a single page. Total reading time is real; there is no per-page breakdown because there are no pages. |\n| **Video** | ❌ | Not displayed. A document can *carry* a presenter video during a live presentation, but a video file is not something you can open as a document. |\n| **HTML** | ❌ | Deliberately. Displaying arbitrary HTML means executing someone's script in your instance's origin, next to sessions and analytics. The same reason `.svg` is refused. |\n| **Office** (`.docx`, `.pptx`, …) | ❌ | Convert to PDF before sending. Nothing in the player renders them, and pretending otherwise would show an empty page. |\n\nAn unsupported file is never a security question either. A relayed file opens on the *player's*\norigin — the domain holding sessions and analytics — so anything a browser would **render** rather\nthan download (SVG, HTML, XML) is served inert: generic type, forced download, `nosniff`. It stays\nretrievable; it cannot execute.\n\n---\n\n## How it fits your application\n\nThe player is a request handler, not a framework. It knows nothing about the application that\nhosts it: everything it borrows — storage, database, identity, rate limits, branding, logging —\narrives through a single injected context.\n\n```mermaid\nflowchart LR\n R([Reader]) -->|/doc/:slug| P\n subgraph P[\"Discovery Media Player\"]\n H[handler] --- D[(shares · presentations)]\n end\n P -->|\"context.identity