Question: are query string parameters encrypted in https?
Answer: For example, an unencrypted HTTP request reveals not just the body of the request, but the full URL, query string, and various HTTP headers about the client and request: An encrypted HTTPS request protects most things: ... The URL path and query string parameters are encrypted, as are POST bodies.