maybe @pat me can use Cloudflare Access for free to restrict access based on emails. or add javascript authentication with email check for simple cases.