The variables are per-request.
Session variables are per-user in a website.
Application variables are for the whole application (i.e website).
Note that on a busy site, overuse of session variables leads to memory pressure (it isn't very efficient), so usage should be kept to a minimum.