Everytime I open a report, it hits http://app.plumbr.eu/decrypt_report with an encrypted version of the report.

Even if you don't store that information, and even if it is not really useful, you should maybe note somewhere that all the "leak" information is sent to Plumbr servers.