Fundo

Fundo asks Google for one thing: whether the address signing in is yours. No mail, no calendar, no contacts.
Only addresses on this server's list may enter — being a Google account is not enough.