All logic is clientside in the downloaded JS and HTML. After the initial page load, it should send nothing to the backend of the website, only API calls to chatGPT API itself.

Theoretically, you should block any outgoing connections to the website domain (after it loads all necessary HTML and JS), and it should still work fine. "Theoretically" because it might attempt delay-loading some static assets, but you get the idea.