When you start a session, the web server generates a session identifier that uniquely identifies the visitor. 
By default, session data is stored in the server's /tmp directory in files that are named sess_ followed by a unique alphanumeric string (the session identifier).