Where exactly are session variables saved? Cookies? Server memory?
Again where are Application variables saved?
For an InProc session, variables are stored locally in memory of ASP.NET worker process. Same goes for application state.