<?xml version="1.0" encoding="UTF-8"?>
<!--
  Three URLs, because three URLs is what this host statically serves.

  /                 the product page
  /privacy/         the App Store Connect Privacy Policy URL, and a page
                    people are sent to from inside the app — it has to be
                    findable on its own
  /delete-account/  Google Play requires this path to be publicly reachable
                    and prominent, which means indexable. A deletion route
                    nobody can find is the failure mode the requirement
                    exists to prevent.

  /r/* IS DELIBERATELY ABSENT. Receipts are minted per closed call and
  revocable by their authors, so the set changes continuously and a checked-in
  file could only ever describe it wrongly. They are discovered the way they
  are meant to be: by the link the author shared. See robots.txt for why they
  are not Disallow'd either.

  /app/* is absent for a different reason — it is a 301 to /, and a redirect
  has no business in a sitemap.

  `lastmod` is the date this file was written, not a per-page timestamp.
  Nothing here regenerates it, so it is honest only for as long as somebody
  edits it with the page; a wrong lastmod is worse than none, which is why
  there are no other freshness hints in this file.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://thesis.aqx.llc/</loc>
    <lastmod>2026-07-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://thesis.aqx.llc/privacy/</loc>
    <lastmod>2026-07-29</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://thesis.aqx.llc/delete-account/</loc>
    <lastmod>2026-07-29</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
