<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:xhtml="http://www.w3.org/1999/xhtml">

    <!-- Marketing homepage (this domain — stash2self.com) -->
    <url>
        <loc>https://stash2self.com/</loc>
        <lastmod>2026-05-12</lastmod>
        <changefreq>monthly</changefreq>
        <priority>1.0</priority>
    </url>

    <!-- Legal / supporting pages -->
    <url>
        <loc>https://stash2self.com/privacy</loc>
        <lastmod>2026-04-29</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.5</priority>
    </url>
    <url>
        <loc>https://stash2self.com/terms</loc>
        <lastmod>2026-04-29</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.5</priority>
    </url>
    <url>
        <loc>https://stash2self.com/refunds</loc>
        <lastmod>2026-04-29</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.4</priority>
    </url>
    <url>
        <loc>https://stash2self.com/changelog</loc>
        <lastmod>2026-05-12</lastmod>
        <changefreq>monthly</changefreq>
        <priority>0.3</priority>
    </url>

    <!-- The app itself lives on app.stash2self.com — it's auth-walled, so we
         only list the public-reachable register page. The Laravel app is
         intentionally noindex,nofollow on every authenticated route. -->
    <url>
        <loc>https://app.stash2self.com/register</loc>
        <changefreq>yearly</changefreq>
        <priority>0.6</priority>
    </url>
</urlset>
