You shouldn't approach the internet as though it's some safe-haven for all your information. If you're going to use the internet, you need to realize that your information is always being collected, distributed and sold. Despite the one post above, Graal doesn't need any special permissions to determine your location. It's based on IP, which every single website you ever load has access to.

Graal simply narrows it down to a location as vague as an entire country, which isn't that bad. It's fairly easy to just input your IP into a website and it'll narrow it down to the city you live in.