In more detail
Pairs are written name=value and joined by &. Reserved characters in names and values must be percent-encoded (a space becomes %20 or +). Query strings are visible in the address bar, logs and the browser history, so never put passwords or tokens in them. Marketing links add tracking parameters such as utm_source this way.