diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7232e22..2548d26 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ### Fixed
 
+- **BunnyCDN logo now displays correctly.** The BunnyCDN integration card in Settings previously showed a generic globe icon. It now shows the proper BunnyCDN bunny logo.
+- **Your BunnyCDN API key is no longer visible in network URLs.** When loading pull zones, the API key was previously sent as a URL parameter. It's now sent securely in the request body, just like when connecting.
+
 - **No more "Site not found" when switching back to Pulse.** If you left Pulse in the background and came back, you could see a wall of errors and a blank page. This happened because the browser fired several requests at once when the tab regained focus, and if any failed, they all retried repeatedly — flooding the connection and making it worse. Failed requests now back off gracefully instead of retrying in a loop.
 
 ### Improved
diff --git a/app/sites/[id]/settings/page.tsx b/app/sites/[id]/settings/page.tsx
index d136265..f45423c 100644
--- a/app/sites/[id]/settings/page.tsx
+++ b/app/sites/[id]/settings/page.tsx
@@ -1617,10 +1617,10 @@ export default function SiteSettingsPage() {
                       <div className="flex items-start gap-4">
                         <div className="p-2.5 bg-white dark:bg-neutral-800 rounded-lg border border-neutral-200 dark:border-neutral-700 flex-shrink-0">
                           <svg className="w-6 h-6" viewBox="0 0 24 24" fill="none">
-                            <circle cx="12" cy="12" r="10" stroke="#FF6600" strokeWidth="1.5" fill="none" />
-                            <path d="M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10A15.3 15.3 0 0 1 12 2Z" stroke="#FF6600" strokeWidth="1.5" fill="none" />
-                            <path d="M2 12h20" stroke="#FF6600" strokeWidth="1.5" />
-                            <path d="M4.5 7h15M4.5 17h15" stroke="#FF6600" strokeWidth="1" opacity="0.5" />
+                            <path d="M8.5 2C7.5 2 6.5 3 6.5 4.5C6.5 5.5 7 6.5 7.5 7C6 7.5 4 9 3.5 11C3 13 3.5 15 4 16C4.5 17 5.5 18.5 7 19.5C8.5 20.5 10 21 12 21C14 21 15.5 20.5 17 19.5C18.5 18.5 19.5 17 20 16C20.5 15 21 13 20.5 11C20 9 18 7.5 16.5 7C17 6.5 17.5 5.5 17.5 4.5C17.5 3 16.5 2 15.5 2C14.5 2 13.5 3 13.5 4C13.5 4.5 13.7 5 14 5.5C13.3 5.2 12.7 5 12 5C11.3 5 10.7 5.2 10 5.5C10.3 5 10.5 4.5 10.5 4C10.5 3 9.5 2 8.5 2Z" fill="#FF6600"/>
+                            <circle cx="9.5" cy="12" r="1.5" fill="white"/>
+                            <circle cx="14.5" cy="12" r="1.5" fill="white"/>
+                            <ellipse cx="12" cy="15.5" rx="1.5" ry="1" fill="white"/>
                           </svg>
                         </div>
                         <div>
diff --git a/lib/api/bunny.ts b/lib/api/bunny.ts
index da83227..5bf5057 100644
--- a/lib/api/bunny.ts
+++ b/lib/api/bunny.ts
@@ -52,7 +52,8 @@ export interface BunnyGeoRow {
 
 export async function getBunnyPullZones(siteId: string, apiKey: string): Promise<{ pull_zones: BunnyPullZone[], message?: string }> {
   return apiRequest<{ pull_zones: BunnyPullZone[], message?: string }>(
-    `/sites/${siteId}/integrations/bunny/pull-zones?api_key=${encodeURIComponent(apiKey)}`
+    `/sites/${siteId}/integrations/bunny/pull-zones`,
+    { method: 'POST', body: JSON.stringify({ api_key: apiKey }) }
   )
 }