how about a request form that ostensibly takes an email address and a name, and an optional text field and then automates the process of sending the paper (or a hidden (unique) link to that paper) to that email address. it need not store those details anywhere, except that it optionally sends an email to the author (if there is a message). the only concern is spam.