Greater minds than mine may be more help here, but …
I don’t think they can. A session is server based. You “appear” to have two different servers - the one containing the iframe (your “normal” web page) and the Anvil server running your app inside the iframe.
If you want to share information, I think you’re going to have to pass it back and forth via API calls.