<?xml version="1.0" encoding="UTF-8"?>
<!-- Only the one URL that has content of its own. /login and /register are the
     same document served by the SPA fallback and both canonicalise to "/", so
     listing them only told Google to fetch pages it would then discard. -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://ikhtasir.com/</loc>
    <lastmod>2026-11-09</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <!-- Added with the legal pages. Unlike /login these are NOT the home page in
       disguise: they carry their own text and their own canonical (set in
       Legal.tsx), and Google's OAuth review fetches both. -->
  <url>
    <loc>https://ikhtasir.com/privacy</loc>
    <lastmod>2026-11-10</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://ikhtasir.com/terms</loc>
    <lastmod>2026-11-10</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
