The session will still expire at the prescribed time.
That is unrelated to whether the user is logged in or logged out.
Specifically in your case it handles the case where the user does not logout.
(Actually when they logout the session deletes, but another (empty) one will often be created since they're still on the site. That one in turn will expire at the prescribed timeout.
cheers
Bruce