<?xml version="1.0" encoding="UTF-8"?>
<!-- The addresses here are the ones that ANSWER, not the filenames behind them.

     Cloudflare serves these pages without the .html and redirects the .html
     form to it: /privacy.html answers 307 and lands on /privacy. A sitemap
     naming the .html form therefore hands a search engine a list of redirects
     and asks it to work out where each one really goes. Google asks for the
     canonical address, which is the one at the end of the redirect.

     Only pages a stranger is meant to find are listed. /app, /admin and
     /shared carry "noindex" in their own markup and are deliberately absent. -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://timeflowapp.app/</loc>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://timeflowapp.app/privacy</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://timeflowapp.app/terms</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://timeflowapp.app/cookie</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
