When an app asks you to approve a token, you give its contract permission to move that token out of your wallet later, sometimes with no limit on the amount. That permission stays in place until you revoke it, even after you stop using the app. Block explorers like Etherscan have a page that lists your active approvals, and we asked our community when they last checked theirs.