<?xml version="1.0" encoding="UTF-8"?>
<!--
  The five public pages, and only those five.

  NOT LISTED, all on purpose: admin.html, which is noindex and linked from
  nowhere, so listing it would advertise the one path this site never publishes
  (see public/robots.txt for the same reasoning at more length); account.html,
  which is out of the build since 2026-09-26 so /account answers the 404; and
  404.html, which is an error page and never belongs in a sitemap.

  Every <loc> is the URL Cloudflare Pages actually answers 200 on: extensionless,
  no trailing slash (privacy.html and privacy/ both 308 to /privacy), and the
  same string as that page's canonical and og:url.

  <lastmod> is the date that page's content, title, description or structured
  data last changed, NOT its last commit: every release touches every page's
  version badge, and a date that moves on each push is one a search engine
  learns to ignore. Change a page, change its date here in the same commit
  (the per push list in CLAUDE.md says so). The policy pages' "Last updated"
  stamp is the policy text's own date, so their lastmod can be later than it.

  Discovered through the Sitemap line in robots.txt at the root of bssaub.com.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://bssaub.com/</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/cabinet</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/privacy</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/cookies</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/terms</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
</urlset>
