How long does a user stay logged in for after logging in with a magic link?

Until they log out or until their token expires (token gets automatically renewed within an hour if the tab/window is active)

does that mean that if the token expires when they are not on the site, they need to log in again next time they visit?