<?xml version="1.0" encoding="UTF-8"?>
<!--
  Only genuinely indexable URLs belong here.

  Omitted on purpose:
  - /login, /forgot-password, /reset-password, /set-password, /confirm-email —
    auth screens with no prose. The last three render
    <meta name="robots" content="noindex">, and a sitemap full of URLs Search
    Console reports as "Excluded by noindex tag" teaches Google the file is
    unreliable, which discounts the lastmod signal on the URLs that matter.
    They stay crawlable — blocking them would hide their noindex.
  - /dashboard/* — behind auth, and disallowed in robots.txt.

  <changefreq> and <priority> are omitted because Google ignores both. <lastmod>
  is the one signal it does use, and only while it stays accurate: bump it when
  the page's content actually changes, never on every deploy.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://goburo.io/</loc>
    <lastmod>2026-07-26</lastmod>
  </url>
</urlset>
