<?xml version="1.0" encoding="UTF-8"?>
<!--
  Every URL here must be one nginx actually serves. The site is static files
  under supabase/selfhost/www with `try_files $uri $uri.html $uri/index.html`,
  so /privacy resolves to privacy.html and /delete-account to that directory's
  index.html. Anything listed but not copied in the "Render static site" step of
  .forgejo/workflows/backend-deploy.yml is a 404 in Search Console, which is
  worse for indexing than leaving it out.

  lastmod is the date the underlying source last changed in git — bump it when
  you edit the page, and don't let it drift forward on untouched pages.

  Only pages that should appear in search belong here. /delete-account and
  /confirmed are deliberately absent: both carry <meta name="robots" content=
  "noindex">, and listing a noindex page is a contradiction Search Console
  reports back as an error. They stay reachable — Play verifies the deletion URL
  and GoTrue redirects to /confirmed — they are just not results.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://sepamo.com/</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://sepamo.com/privacy</loc>
    <lastmod>2026-08-21</lastmod>
  </url>
  <url>
    <loc>https://sepamo.com/terms</loc>
    <lastmod>2026-08-17</lastmod>
  </url>
  <url>
    <loc>https://sepamo.com/imprint</loc>
    <lastmod>2026-08-15</lastmod>
  </url>
</urlset>
