<?xml version="1.0" encoding="UTF-8"?>
<!--
  Public, indexable routes only. Everything else in src/App.tsx sits behind
  ProtectedRoute / AuthRoute, is a redirect shim, or is a preview route, and is
  deliberately absent. No <lastmod>: there is no trustworthy publication date
  for these pages, and an invented one is worse than none.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://supup.io/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <!--
    /privacy and /terms are deliberately absent: with no SSR every route serves
    index.html, whose canonical points at /, so submitting them only asks Google
    to drop them as "alternate page with proper canonical tag". Re-add them once
    per-route heads exist (prerender or host-level head injection).
  -->
</urlset>
