Session variables are created when a new client first interacts with the web application, establishing a unique session for that user. The application's placement on the server or the web server's startup do not trigger session creation - sessions are user-specific. Every subsequent request from that same client uses the existing session; only new clients get new sessions.