diff --git a/app/workers/refresh_sitemap_worker.rb b/app/workers/refresh_sitemap_worker.rb
index c38f0c2..83f35d9 100644
--- a/app/workers/refresh_sitemap_worker.rb
+++ b/app/workers/refresh_sitemap_worker.rb
@@ -36,6 +36,7 @@ class RefreshSitemapWorker
     if Rails.env.production?
       SitemapGenerator::Sitemap.adapter = SitemapGenerator::AwsSdkAdapter.new(
         ENV.fetch("AWS_BUCKET", Rails.application.credentials.dig(:s3, :bucket)),
+        acl: "private",
         aws_access_key_id: ENV.fetch("AWS_ACCESS_KEY_ID", Rails.application.credentials.dig(:s3, :access_key_id)),
         aws_secret_access_key: ENV.fetch("AWS_SECRET_ACCESS_KEY_ID", Rails.application.credentials.dig(:s3, :secret_access_key)),
         aws_region: ENV.fetch("AWS_REGION", Rails.application.credentials.dig(:s3, :region)),
@@ -45,6 +46,7 @@ class RefreshSitemapWorker
     else
       SitemapGenerator::Sitemap.adapter = SitemapGenerator::AwsSdkAdapter.new(
         ENV.fetch("AWS_DEV_BUCKET", Rails.application.credentials.dig(:s3_dev, :bucket)),
+        acl: "private",
         aws_access_key_id: ENV.fetch("AWS_DEV_ACCESS_KEY_ID", Rails.application.credentials.dig(:s3_dev, :access_key_id)),
         aws_secret_access_key: ENV.fetch("AWS_DEV_SECRET_ACCESS_KEY_ID", Rails.application.credentials.dig(:s3_dev, :secret_access_key)),
         aws_region: ENV.fetch("AWS_DEV_REGION", Rails.application.credentials.dig(:s3_dev, :region)),