What permissions are given when connecting your wallet to a dapp

When you connect your wallet to an app for example, orca, or radium, or even a game like star atlas, what permissions (if any) are you giving the app? What information are you giving them once you are connected? Can they see all your wallets token, NFTs, stakes etc?

When you connect your wallet, you are letting the app know what your wallet address is. And since all of your balances, NFTs, etc. are stored publicly on the chain, yes, they can see all of your tokens, etc.

If you don’t enable auto-signing ( don’t do that, it’s a huge security risk ), then you aren’t giving them permission to do anything to your wallet.

The app still needs to ask for you to approve every transaction that could spend your money or do transfers, etc.