Datatal AB - Gauffin, Jonas wrote:

>The data is always stored on the local machine it's never sent to the client machine. If cookies are used, only the sessionid is
stored in it.
>
>  
>
Partly true, the session data doesn't have to be stored on the local 
machine, you can define custom session handlers to store the data in a 
RDBMS for example.  It's just stored in local temp files by default.