<?xml version="1.0" encoding="UTF-8"?>
<!--
  Only publicly reachable, indexable pages belong here. Authenticated routes
  redirect signed-out visitors to /login, so listing them would just generate
  "Page with redirect" exclusions in Search Console.

  No <lastmod>: it has to be accurate to be useful, and nothing regenerates
  this file on deploy. An honest omission beats a stale date.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://hsabuddy.net/</loc></url>
  <url><loc>https://hsabuddy.net/privacy</loc></url>
  <url><loc>https://hsabuddy.net/terms</loc></url>
  <url><loc>https://hsabuddy.net/disclaimer</loc></url>
</urlset>
