# Web Auditor Findings Definitions (/docs/web-auditor/findings)

Comprehensive list of different findings the Web Auditor can detect, and what they mean.

## Airgap Not Found [#airgap-not-found]

- Severity: Informational

This finding indicates that you are not using `airgap.js` to collect and enforce Consent on your website.

## Unregulated Cookie Stored [#unregulated-cookie-stored]

- Severity: Varied
- Requires: `airgap.js` being installed on the site being scanned.

"Unregulated" here means that `airgap.js` did not _regulate_ the cookie at all -- that is, it did not have the chance to inspect the mutation/event and make a determination to block or allow based on user consent and <GlossaryTerm id="bundle">bundle</GlossaryTerm> configuration.

We then assign different severity levels to the finding depending on the cookie's purposes as it was known by `airgap.js` at the time of the scan:

| Level         |                                                                                                                              |
| ------------- | ---------------------------------------------------------------------------------------------------------------------------- |
| Informational | A cookie marked with `Essential` purpose was stored without being regulated by `airgap.js`.                                  |
| Medium        | A cookie not explicitly tagged with any tracking purpose was stored without being regulated by `airgap.js`.                  |
| High          | A cookie that was explicitly tagged with a non-essential tracking purpose was stored without being regulated by `airgap.js`. |

## Unregulated Network Request Made [#unregulated-network-request-made]

- Severity: Varied
- Requires: `airgap.js` being installed on the site being scanned.

"Unregulated" here means that `airgap.js` did not _regulate_ the netwok request at all -- that is, it did not have the chance to inspect the mutation/event and make a determination to block or allow based on user consent and <GlossaryTerm id="bundle">bundle</GlossaryTerm> configuration.

We then assign different severity levels to the finding depending on the cookie's purposes as it was known by `airgap.js` at the time of the scan:

| Level         |                                                                                                                                       |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| Informational | A network request was made to a domain tagged with `Essential` purpose without being regulated by `airgap.js`.                        |
| Medium        | A network request not explicitly tagged with any tracking purpose was made without being regulated by `airgap.js`.                    |
| High          | A network request that was explicitly tagged with a non-essential tracking purpose was stored without being regulated by `airgap.js`. |

## Facebook Pixel LDU [#facebook-pixel-ldu]

- Severity: Medium

A network request was made to a known Facebook Ads domain without the `ldu` (Limited Data Use) parameter.

Please review the [official Facebook documentation](https://developers.facebook.com/docs/marketing-apis/data-processing-options/#reference) to learn more.

## Google RDP [#google-rdp]

- Severity: Medium

A network request was made to a known Google Ads domain without the `rdp` (Restricted Data Processing) parameter. When Google Ads SDKs fire and the user has opted out, then the Restricted Data Processing parameter should be included.

Please review the [official Google documentation](https://support.google.com/adsense/answer/9598414) to learn more.

## Twitter Ads [#twitter-ads]

- Severity: Medium

A network request was made to a known Twitter Ads domain even though the user has opted out.

## Pinterest Ads [#pinterest-ads]

- Severity: Medium

A network request was made to a known Pinterest Ads domain even though the user has opted out.

## Tiktok Pixel [#tiktok-pixel]

- Severity: Medium

A network request was made to a known Tiktok domain even though the user has opted out.

## Microsoft Advertising [#microsoft-advertising]

- Severity: Medium

A network request was made to a known Microsoft Advertising domain even though the user has opted out.