<?xml version="1.0" encoding="UTF-8"?>
<!--
  The seven public routes from MARKETING in frontend/src/App.jsx, and nothing
  else. The four auth paths (/login, /register, /forgot-password,
  /reset-password) are deliberately absent: they render the home page with a
  dialog over it, so listing them would offer Google four more URLs carrying
  the home page's content.

  ⚠ Keep this in step with MARKETING. A route added there and not here is a
  page Google is never told about.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://ostiara.com/</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/about</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/pricing</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/security</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/contact</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/legal/privacy</loc><lastmod>2026-08-25</lastmod></url>
  <url><loc>https://ostiara.com/legal/terms</loc><lastmod>2026-08-25</lastmod></url>
</urlset>
