diff --git a/appview/server.go b/appview/server.go
index dca16bb..e4a5ce1 100644
--- a/appview/server.go
+++ b/appview/server.go
@@ -116,13 +116,13 @@ func NewServer(cfg Config) (*Server, error) {
 	e.Use(middleware.Recover())
 	e.Use(middleware.RequestLoggerWithConfig(middleware.RequestLoggerConfig{
 		LogStatus:   true,
-		LogURI:      true,
 		LogMethod:   true,
 		LogRemoteIP: true,
 		LogValuesFunc: func(c echo.Context, v middleware.RequestLoggerValues) error {
+			// Log only the URL path; query strings can carry credentials and must not land in logs.
 			logger.Info("request",
 				"method", v.Method,
-				"uri", v.URI,
+				"path", c.Request().URL.Path,
 				"status", v.Status,
 				"ip", v.RemoteIP,
 			)