Chrome on Android allows it by default. You have to got to Site Settings to disable it. Safari on iOS prompts the user before allowing it.