Glossary
Push notification
A message a server sends to a device that arrives even when the app or tab is closed.
On the web this runs through a push service the browser vendor operates, using keys the site generates. The payload is encrypted so the push service cannot read it, and the site's service worker decrypts it and shows the notification.
Permission is asked once, per browser and per device, and a declined prompt cannot be asked again — which is why the timing of the request matters so much.
Where Naven stands
Naven's notifications say who a message is from, never what it says. Permission is asked in Settings rather than on arrival, so the question comes when somebody has a reason to say yes.