A little more detail ...
After a period of time defined in your php.ini file, the untouched session becomes eligible for deletion.
A garbage collection routine is invoked according to a probability value (also defined in php.ini).
The more traffic you have, the more likely the gc routine will be invoked.
If you have very little traffic, the old sessions may sit around for awhile. But sooner or later, the garbage collection will come around, and they will be erased.