<?xml version="1.0" encoding="UTF-8"?>
<!--
  The public surface, and only that. Everything else in the app is behind auth
  or is per-user data, so there is nothing for a crawler to index there.

  Trailing slashes are deliberate: Cloudflare Pages 308s the extensionless form
  ("/privacy" -> "/privacy/"), so listing the bare path would send every crawler
  through a redirect hop.

  Static rather than generated: three URLs that change when we add a page, which
  is rare enough that a build step would be more machinery than it is worth. Add
  a line here if a new page becomes publicly reachable.

  No <lastmod>: a hand-maintained date that silently goes stale is worse than no
  date at all, and Google ignores <changefreq>/<priority> anyway.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
    <url>
        <loc>https://recipesesame.app/</loc>
    </url>
    <url>
        <loc>https://recipesesame.app/privacy/</loc>
    </url>
    <url>
        <loc>https://recipesesame.app/terms/</loc>
    </url>
</urlset>
