You have installed an application.

An icon has appeared on your home screen. This "app" stays there even when you close the browser — and works even offline. This is the mobile equivalent of persistence: on a phone, the payload comes through a PWA (or an APK), not an extension.

You are viewing this page in "application" mode (full screen, no address bar) = this is the installed app running.

What can this app see?

Files, clipboard, location, camera… discover what a simple "Allow" gives:

It can notify you — even when app is closed

By enabling notifications, this device subscribes to push. The trainer will then be able to send you a notification from the dashboard, even when the app is closed.

This is exactly the channel an attacker would use to reach you at any time.

Uninstallation

Two gestures to show in training:

1. Remove the icon: long press on the icon → Uninstall / Remove.
2. Revoke notifications: site settings in the browser.

This button removes the service worker and clears the demo cache. The icon itself is removed manually (the browser does not allow it via script).