<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:xhtml="http://www.w3.org/1999/xhtml">

  <!-- Home / Landing Page — highest priority -->
  <url>
    <loc>https://sharekars.in/</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- Vendor Login / Register — public, no auth required -->
  <url>
    <loc>https://sharekars.in/login</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- Customer App Login — public, no auth required -->
  <url>
    <loc>https://sharekars.in/app/login</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

  <!-- NOTE: /app/rent, /app/rides, /app/intercity and everything else under
       /app/* were removed 2026-08-28 — they all require RequireCustomerAuth
       (see src/App.jsx), so an anonymous Googlebot crawl gets redirected to
       /app/login with no real content, wasting crawl budget and signalling
       thin/duplicate content. Add a URL back here only once it's genuinely
       reachable without login. -->

</urlset>
