<?xml version="1.0" encoding="UTF-8"?>
<!--
  CAP-819. Three URLs, hand-written, and that is the whole site as far as a
  search engine is concerned: the landing page and the two legal pages.

  NO <lastmod>. A hardcoded date rots within a month, and Google discounts the
  whole field for a site once it catches one that disagrees with the content it
  fetched — so a wrong lastmod is worse than an absent one. Nothing in this
  repo generates this file at build time, so there is no honest date to put
  here.

  NOT LISTED, deliberately:
    • /index.html — the same document as /, and listing both invites a
      duplicate pair where the render-pass canonical in index.html is the only
      thing separating them.
    • /waitlist/confirm — a transactional landing page for a mailed link. It
      is indexed today (measured 2026-09-20) and needs removing, not
      advertising; see web/robots.txt for why it is not blocked either.
    • /invite, /activate, /forgot-password, /reset-password — token routes,
      disallowed in robots.txt.
    • every in-app route — one shell serves them all, so they are already
      correctly classified "Excluded: Soft 404".

  /privacy.html and /impressum.html are real files in the docroot and win over
  the SPA fallback (RewriteCond !-f). The extensionless /privacy returns the
  shell, so the .html is load-bearing here, not cosmetic.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://capitelize.com/</loc>
  </url>
  <url>
    <loc>https://capitelize.com/privacy.html</loc>
  </url>
  <url>
    <loc>https://capitelize.com/impressum.html</loc>
  </url>
</urlset>
