<?xml version="1.0" encoding="UTF-8"?>
<!--
  Trovato's sitemap.

  THREE URLs. The build has five HTML pages — index.html, privacy.html,
  terms.html, account.html and admin.html — but the two portals carry
  `X-Robots-Tag: noindex, nofollow` (public/.htaccess §5) and must never be
  listed here: a sitemap is a list of pages you want in search results, and
  listing a noindexed URL just asks Google to fetch it and discard it.
  Everything else a customer reads is on the homepage, in sections.

  /privacy.html and /terms.html are listed because they genuinely are pages a
  customer might look for, and because Google's OAuth brand verification wants
  both reachable on this domain and linked from the homepage. They are NOT
  caught by the §5 noindex rule — that rule is scoped to
  ^(account|admin)\.html$ — and they must never be added to it.

  <lastmod> is only used by Google when it is verifiably accurate, so update
  the date below whenever the homepage copy changes in a way a reader would
  notice. Leaving it stale is not harmful — it is simply ignored — but an
  accurate one helps a new site get re-crawled after an edit.

  The host here is the APEX (trovatosaz.com). If the canonical host is ever
  switched to www, four things change together or they contradict each other:
  this file, the <link rel="canonical"> and og:url in index.html, the
  Sitemap: line in robots.txt, and the redirect in public/.htaccess §1.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://trovatosaz.com/</loc>
    <lastmod>2026-09-11</lastmod>
  </url>
  <url>
    <loc>https://trovatosaz.com/privacy.html</loc>
    <lastmod>2026-09-11</lastmod>
  </url>
  <url>
    <loc>https://trovatosaz.com/terms.html</loc>
    <lastmod>2026-09-11</lastmod>
  </url>
</urlset>
