<?xml version="1.0" encoding="UTF-8"?>
<!--
  BPROL Global Private Access — sitemap

  Only the 3 marketing-public URLs are listed. Everything else is gated
  behind authentication; per robots.txt those URLs must not be crawled
  and therefore must not appear here either.

  hreflang alternates intentionally NOT emitted. We tried earlier with
  ?lang=zh-CN / ?lang=zh-TW alternates, but `app/src/proxy.ts` strips
  `?lang=` and 307-redirects to the same clean URL (writing the
  `bprol_locale` cookie). Crawlers don't follow Set-Cookie, so every
  `?lang=` alternate effectively resolves to the same default-locale
  page — the alternates conveyed no real signal and risked being flagged
  as duplicate content. Since this is a private client portal with
  English as the primary public language and the multi-locale UI is for
  signed-in clients (cookie-driven), we accept the private-portal discovery trade-off.

  If real per-locale crawlable URLs become a goal later, the right fix
  is a `[locale]` URL segment (or per-locale subdomain) — at which point
  this sitemap should grow proper xhtml:link alternates again.

  Update the <lastmod> values when the marketing copy of a listed URL
  changes (not on every deploy).
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://bprol.global/</loc>
    <lastmod>2026-05-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://bprol.global/login</loc>
    <lastmod>2026-05-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://bprol.global/signup</loc>
    <lastmod>2026-05-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
</urlset>
