Since the whole point of cookies is to let the user('s browser) store and return them, you can't trust on them being hidden them at all, ever. In fact, you can NOT trust cookies at all.

And yes, without an expiry date, they should expire on closing the browser.

see the specs