State Persistence - ASP.NET

ItemLevelPersists
between
sessions?
SecurityUser-
writable?
Server variableServerUsually (if website isn't restarted)MediumYes
Application variableApplicationUsually (if website isn't restarted)MediumYes
CookieApplicationUsually (user can delete)MediumUsually (user can disable)
DatabaseApplicationYesHighYes
web.configApplicationYesHighNo
Session variableSessionNoMediumYes
Query stringRequestPossibly (via bookmarks)LowYes
View StateRequestNoLowYes