The primary distinction between a session and a cookie is that session data is stored on the server while cookie data is stored in the visitor's web browser. Because sessions are saved on the server, they are more secure than cookies.