Can you confirm that SessionWizardView stores data on server side session object not user's session?

[adi-]

In my testing environment I am storing data in self.storage. Then, in other web browser (to be sure that user has other session number) I am reading data from self.storage and – which is very worrying – I see the same data I have stored in first web browser.

When I use CookieWizardView everything works fine.

Can you confirm? This is potential data leakage if I am right.