<?xml version="1.0" encoding="UTF-8"?>
<!--
  The six public pages, and only those six. account is back since 2026-10-12
  (it was out of the build from 2026-09-26, when /account answered the 404).

  NOT LISTED, both on purpose: admin.html, which is noindex and linked from
  nowhere, so listing it would advertise the one path this site never publishes
  (see public/robots.txt for the same reasoning at more length); and 404.html,
  which is an error page and never belongs in a sitemap.

  Every <loc> is the URL Cloudflare Pages actually answers 200 on: extensionless,
  no trailing slash (privacy.html and privacy/ both 308 to /privacy), and the
  same string as that page's canonical and og:url.

  <lastmod> is the date that page's content, title, description or structured
  data last changed, NOT its last commit: every release touches every page's
  version badge, and a date that moves on each push is one a search engine
  learns to ignore. Change a page, change its date here in the same commit
  (the per push list in CLAUDE.md says so). The policy pages' "Last updated"
  stamp is the policy text's own date, so their lastmod can be later than it.

  Discovered through the Sitemap line in robots.txt at the root of bssaub.com.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://bssaub.com/</loc>
    <lastmod>2026-10-23</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/account</loc>
    <lastmod>2026-10-12</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/cabinet</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/privacy</loc>
    <lastmod>2026-10-23</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/cookies</loc>
    <lastmod>2026-10-23</lastmod>
  </url>
  <url>
    <loc>https://bssaub.com/terms</loc>
    <lastmod>2026-10-06</lastmod>
  </url>
</urlset>
