<?xml version="1.0" encoding="UTF-8"?>
<!--
  https://echo.aimdev.site/sitemap.xml

  ONLY the three publicly indexable routes belong here. The list is not a
  convenience — it is the same list src/lib/head.ts marks `indexable: true`,
  and the two must never drift apart.

  DELIBERATELY ABSENT, and must stay absent:

    /r/<token>  /d/<token>  /t/<token>  /g/<ptoken>

  Those are capability URLs. Each one addresses ONE sealed message and the
  token in the path is the entire credential — there is no login in front of
  them, by design, so the recipient never needs an account. Listing a single
  one here would hand the message itself to every crawler that reads this
  file. They are noindex in head.ts and Disallowed in robots.txt; a sitemap
  entry would actively invite the crawl those two are there to prevent.

    /admin  /auth  /new  /drops/*  /trails/*  /games/*  /profile

  Signed-in creator app and owner-only moderation — one shell for every route,
  nothing to index.

  lastmod values are the real last-change dates of each page's source
  (src/screens/Landing.tsx, src/screens/LegalPages.tsx), not the build date.
  Bump them when the page content actually changes; a lastmod that moves on
  every deploy teaches crawlers to ignore it.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://echo.aimdev.site/</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://echo.aimdev.site/privacy</loc>
    <lastmod>2026-08-26</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://echo.aimdev.site/support</loc>
    <lastmod>2026-08-26</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://echo.aimdev.site/terms</loc>
    <lastmod>2026-08-26</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
