<?xml version="1.0" encoding="UTF-8"?>
<!--
  Hand-maintained on purpose: the site is two URLs, and generating this at build time is not possible
  anyway — the Docker build context is website/ with .git excluded (see .dockerignore), so neither git
  history nor ../docs is reachable inside the image. Same constraint that forces public/privacy/index.html
  to be a committed artifact (see scripts/build-privacy.mjs).

  When you add a page: add a <url>. When a page's content changes: bump its <lastmod>.
  <lastmod> is the only optional field kept — Google ignores <changefreq> and <priority> outright, and it
  discounts <lastmod> too once it stops matching reality, so a stale date is worse than no date at all.

  Trailing slashes match the canonicals the pages declare (e.g. /privacy/), so the sitemap and the pages
  never disagree about which URL is the real one.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <!-- Hero / early-access landing — index.html + src/App.tsx -->
  <url>
    <loc>https://dietclaude.com/</loc>
    <lastmod>2026-08-22</lastmod>
  </url>
  <!-- Privacy policy, generated from docs/PRIVACY.md by scripts/build-privacy.mjs -->
  <url>
    <loc>https://dietclaude.com/privacy/</loc>
    <lastmod>2026-08-22</lastmod>
  </url>
</urlset>
