<?xml version="1.0" encoding="UTF-8"?>
<!--
  Static sitemap for the public marketing surface.

  apps/web is `output: "export"`, so this cannot be generated from a Next route
  handler at request time — it is a plain file in public/ and the URLs are
  absolute, which means the HOST IS BAKED HERE. If the product domain ever moves
  again, this file has to move with it (same rule as lib/app-url.ts).

  It exists because paforever.com is a brand-new domain: Google had no crawl
  history for it during OAuth branding verification, and a sitemap plus an
  accurate <lastmod> is the fastest way to get the home page, privacy policy and
  terms (re)crawled. Bump <lastmod> when the marketing copy materially changes.
  Dashboard/auth routes are deliberately absent — they are private.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://www.paforever.com/</loc>
    <lastmod>2026-08-15</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.paforever.com/privacy</loc>
    <lastmod>2026-08-15</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.paforever.com/terms</loc>
    <lastmod>2026-08-15</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.paforever.com/contact</loc>
    <lastmod>2026-08-15</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
